use the same normalization for GRANT and REVOKE, and allow ALL PRIVILEGES

This should fix #10574