s3-auth Rename NT_USER_TOKEN privileges -> privilege_mask