fn privilege_to_acl_mode(privilege: Privilege) -> AclMode