Actually the easiest way is this:
add this to the subnet declaration:
...
subnet 10.64.87.0 netmask 255.255.255.0 {
if option host-name="" {deny unknown-clients;}
...
This works, I tried it with a known hostname and it was denied. Then I
tried it on one of the pc with blank hostname and it worked their too.
Phil
