fix(privileges): make client refetch it after user/role change