Set-PnPSite with NoScriptSite switch using Entra application: Unauthorized Operation

[KlausKeys]

Hi,
I'm trying to use a simple script to set several settings on a site. I have in particular to set the Style Library as hidden. Unfirtunately it can be done only when the Custom Scripts are enabled on the site, and I'm not able to set it using Set-PnPSite when I'm connected to the site as a registered application.
Using an interactive authentication with a Global Admin, no problems. But I have, for security reason, to achieve the same result using the script and using a ClientId/Certificate authentication.
The app has FullControl over the site collection, and all the other actions over lists and libraries are working fine. But all the Set-PnPSite changes fail. Does anyone could help me to understand which kind of permission is missing and how to assign it to my Entra Registered App?