fix(privileges): use : as a separator in privilege names

there is a mongo error when using `.` as a separator and patching users
with `{"archive.spike": 1}`

SD-1117