Fixed the privilege parsing from the credentials. We now look for the wildcard '*'.