There's one thing that I didn't see mentioned.  The 9120 AP does not support WPA3 with GCMP 256 encryption.  If this is a requirement for your SSID, you'll need a 9130.  Trying these settings on a 9120 causes the AP to no longer host the SSID.