Use category privacyContexts field to create privileged entitlement KS