Bootstrapping permissions for settings page adds permissions under Public but not Authenticated?bug?

Also pinging http://localhost:1337/notifications-plugin/settings without any authentication in Postman still gets a 401 error even if permissions are enabled under Public so maybe it doesn’t work anyway.

I can work around this, but it seems so close to working! It would be great to figure this out