allow masterserver to specify privilege