add privileged flag