add "privileged" to "app_type" for search API

r? @robhudson