cache privileges/add role_map support