add more privileges, improve docs