security: Setting global settings requires approval.

core/core.js

@@ -419,6 +419,7 @@ async function getProcessBlob(blobId, key, options) {
 					return settings?.[key];
 				};
 				imports.core.globalSettingsSet = async function (key, value) {
+					await imports.core.permissionTest('set_global_setting');
 					print('Setting', key, value);
 					let settings = await loadSettings();
 					settings[key] = value;