Delegate is_privilege to optimized scoped_privilege where possible
Refactor to minimize n+1 selects