SU - add MONITOR and ADMIN privileges.  Refactored other privilege
checks.