I think of it as being analogous to what happens in user space. Your bag of credentials (ticket file in user space) may contain multiple service tickets, but it's the whole bag that gets inherited from parent to child. A process can change which bag it's going to use by setting an ev, but whatever bag it's using, that's what all applications running in that process or its children will see.