Require transient activation to use API

[w3cbot]

This is a tracker issue. Only discuss things here if they are privacy group internal meta-discussions about the issue. Contribute to the actual discussion at the following link:

§ w3c/geolocation#94

[samuelweiler]

@pes10k and I concur re: letting the current Rec cycle go, but this issue needs to be resolved next time around.