jobs can be configured to have privileged builds