A lawsuit settlement affirms that third parties are not permitted to set fraud alerts with the major credit bureaus.