Create priv-escape.md