A recent bootchart shows wpa_supplicant starting early: https://drive.google.com/open?id=1mMrr-K_9d5Mh95YG8UBOEkk0YWXijwNT
Indeed, wpasupplicant has "start on started boot-services". We should only be doing this for services that are required to bring up the UI, which doesn't seem the case for wpa_supplicant, thus potentially impacting boot performance negatively.
We should change wpasupplication.conf to "start on started system-services" or alternatively add documentation to wpasupplicant.conf that explains why we need it early and justifies the boot perf impact.
Assigning to cernekee@ for now since he is my best guest for the person who is most likely to have context.