clarify privileges further in 3.0