I tried Colasoft MAC scanner, and no sign of the AP900's MAC, not on any of the IP ranges I've used here.
I also just tried an experiment, I setup a totally separate hardwired network using the Zyxel router connected to the AP900 and a laptop (wireless turned off) and whilst the laptop obtained an IP address and showed in the Zyxel interface the AP900 never did.
Its certainly done a very good disappearing act, I will have to at some point reset the AP900, in theory it should just auto provision from the Draytek