Stays masked under sway: the default backend is gtk and ScreenCast/Screenshot route to wlr, so the hyprland portal was ~35MB of never-used daemon. Committed as a /dev/null symlink -- that IS the systemd mask mechanism, so a checkout restores the mask without an extra enable/mask step. Verified afterwards that the session still exposes every portal interface.