handle wildcard-requests in have_priv()