wpa_supplicant: remove unused services

hosts/common/programs/networkmanager.nix

@@ -72,7 +72,7 @@ in
           # "CAP_DAC_OVERRIDE"
           "CAP_NET_ADMIN"
           "CAP_NET_RAW"
-          "CAP_NET_BIND_SERVICE"  #< TODO: is this needed? why? (DNS?)
+          "CAP_NET_BIND_SERVICE"  #< this *does* seem to be necessary, though i don't understand why. DHCP?
           # "CAP_SYS_MODULE"
           "CAP_AUDIT_WRITE"  #< allow writing to the audit log
           # "CAP_KILL"

hosts/common/programs/wpa_supplicant.nix

@@ -17,6 +17,10 @@ in
           postInstall = upstream.postInstall + ''
             substituteInPlace $out/share/dbus-1/system-services/* --replace-fail \
               "$out$out" "$out"
+          ''
+          # remove unused services to avoid unexpected interactions
+          + ''
+            rm $out/etc/systemd/system/{wpa_supplicant-nl80211@,wpa_supplicant-wired@,wpa_supplicant@}.service
           '';
         });
         # sandbox.enable = false; #< TODO: re-enable