s4-privs: add root_privileges_original_uid()