Move privileged flag to Create call

Also add 'user' to run command. 'Privileged' remains on run command for
backwards compatibility.

[#82838560]