Accept strings/symbols in is_privilege? to avoid having to serialize operations