use new set_privilege_map