allow masterserver to set auth privilege