If your pc's have full access to the VLAN anyway, create an SSID on that VLAN and use it when you want to watch something. You're overcomplicating your network unnecessarily. I run a separate network for my business servers, but couldn't care less about the IoT crap. Oh and a separate VLAN for Dante ...