We already have .1x which supports various auth methods such as certificate auth and can use policies to assign clients to VLANs