grant openid related relations privileges to apache