Migrate rewards privileges to Pundit