Move privilege checker to gesture-server