Hmmm, good point. The 3002 will bypass IP Phones for individual user authentication, but there's currently no way to disable it for other devices.
I would contact your account manager and have him fill in an enhancement request for this, then it will be considered for a later release. I don't believe any work is currently being done on it.