fn privilege_spec_to_acl_mode(
    scx: &StatementContext<'_>,
    privilege_spec: &PrivilegeSpecification,
    object_type: SystemObjectType
) -> AclMode