- simplify definition of privileges in a table file
- only initialize priv sets once
- implement the master jails