"Application ... settings" is (probably?) still ambient authority - the application has the permission to do XYZ so all parts of the application have permission

"Application ... settings" is (probably?) still ambient authority - the application has the permission to do XYZ so all parts of the application have permission to do XYZ, and it might be possible to confuse a part of the program that isn't supposed to XYZ into doing so. Capabilities is about associating the permission to do a thing with the handle you'd do it through; unrelated parts of the program don't know how to talk about the thing so can't do it.