r9194: do not enumerate privileges when they are not enabled