When we added Application Privileges we intentionally didn't cache them because the semantics of a distributed cache can be tricky (we've had to tweak the user & roles caching logic several times) and we weren't sure how necessary it would be

We've recently seen a few places where that lack of caching had an impact, and it's probably time to bring it in.