Help please.

I have a guest over who’s staying and I gave him my wifi passwords and he wants to play little games by controlling the tv and trying to block me out of my own wifi. I know he can always reset my gateau and get back in. He hasn’t went. That far yet. But how can I restrict his devices from being able to do anything with other devices on my netoeork and or using jail broken device to modify and view passwords. I have security enabled and I’m not sure what to add under managed services and applications to limit him from being able to do anything but surf the web and stream videos.