s3-privs Call security_token_set_privilege() rather than manual assignment