Experimental (non-stable) API design for "privs" package