IME, at the very least, it needs to appear after this line: wpa-conf /etc/wpa_supplicant/wpa_supplicant.conf.