s4: Patch to implement nested group and privileges