Unfortunately, local radius server doesn't do MAC authentication. I understand your need. But adding further features to local radius server will impar the most important task for the AP, i.e. serving wireless clients.
MAC Authentication can be either remote radius server, like ACS, or local to the AP itself.
local radius server was originally designed just for WDS purpose. After all, AP's major job is still to serve wireless clients.