ensure-perms
this was created weeks ago and not committed
otherwise iwd doesn't seem to understand them?
iwd, v.s. wpa_supplicant, has smarter metrics for choosing which wireless networks to connect to when multiple are in range.