guarantee that the Updater permitted networks setting is respected

[thestinger]

It's currently possible for the network to change after the job scheduler starts the update where it doesn't fail and continues on a different network not meeting the requirements. It should probably bind to the current network after making sure it's valid and then the usual rescheduling logic should take of everything.