revoke all previous privileges before granting

a patch for https://tickets.opscode.com/browse/COOK-3836