Per RFC 8621, Identity/get, Identity/set, and EmailSubmission/set require the submission capability. Missing it caused Stalwart to reject identity deletion (and potentially other identity operations).