handle Privileged being set in process spec