pub fn mz_acl_item_privileges<'a>(mz_acl_item: MzAclItem) -> String