Move privilege check code from recorder_create_* to recorder_start