s3:privileges: convert privileges.c to use dbwrap wrapper functions.