Fix typo: privilage -> privilege
Add a pending negative testcase.