> Seems to me this should be set only conditionally when it's really > required, since for privacy reasons it's really much preferred to not > set it. Thanks for the review. Addressed in v3 by using wpa_bss_get() to set scan_ssid=1 only when the provisioned SSID is absent from scan results.