You could have your switchport just shutdown if it sees more than one MAC, for instance:

interface FastEthernet0/2

switchport mode access

switchport port-security

switchport port-security violation shutdown

spanning-tree portfast

spanning-tree bpduguard enable

And for good measure, the end makes sure that if there is any STP traffic, it blocks it as well.