We don't get the capabilities again, so I think is enough to set it only once.
My understanding is that is used when AUTH is not supported by QMF(e.g AUTH NTLM)