wireless: only enable proxyarp/isolate for AP vifs