fn plan_update_privilege(
    scx: &StatementContext<'_>,
    privileges: PrivilegeSpecification,
    target: GrantTargetSpecification<Aug>,
    roles: Vec<ResolvedRoleName>
) -> Result<UpdatePrivilegesPlan, PlanError>