es_out: add a priv control to change cat ids