early outs for privs

no need to check if empty array is passed in, happens if there are no
unread topics
remove dupe cids before checking for privileges