ensure all privileges are strings and not symbols.