fixed a bug where local admins didn't gain privileges correctly