explain UsePrivilegeSeparation