Downgrades should be comparing new privs to max privs