Good point. I wish the "application-specific" passwords could be tied to a particular service. (I think they just act as a global password.) But I should switch my caldav config over to one anyway.