Discovering hidden access points