manifest tags are checked for package privilege level.