security-manager-tests: use real privilege names