initial server side privileges implementation, using a tdb. This needs to be hooked...