add comment for privilege name rule and conversion