fixed bug, added test, added private options. now does not set primary record on an unmodified users path, even with actAsUser set.