1. A mobile end-user device comprising: a wireless local area network (WLAN) modem to communicate data for Internet service activities between the device and selected WLAN access points, when configured for connection to, and connected to, a selected WLAN access point allowing such data communication; a modem selection and control function configured to select a current available WLAN access point reachable through the WLAN modem, and connect the WLAN modem to the current available WLAN access point in an ambient access mode, the ambient access mode supporting automated device provisioning of secure service plan credentials and not supporting network access for general Internet service activities; and one or more service processor agents configured to request, from a wireless network service selection information exchange reachable via the current available WLAN access point in the ambient access mode, service selection information identifying service providers issuing service plan credentials that are accepted by an operator of the WLAN access point to authorize general Internet service activity network access through the WLAN access point, receive, from the wireless network service selection information exchange in response to the request, service plan selection options for a plurality of service providers, including one or more service providers other than the WLAN access point operator, automatically select at least one secure service plan credential stored on the device, the at least one secure service plan credential provisioned for use with a service provider selected from the selection options, the selected service provider not the WLAN access point operator, and automatically supply, to a server granting access authorization to wireless devices for use of the WLAN access point for general Internet service activity network access, the selected at least one secure service plan credential, thereby allowing the modem selection and control function to connect the WLAN modem to the WLAN access point in a mode that allows general Internet service activity network access.