refactor privileged actions