build: apply_profile: in hybrid-mode, use a smaller netmask on AP-interface and a wider on adhoc