Properly compare privileges as lists