add util to ensure privilege