allow specifying privacy_command