screenshot: add privilege checking rule