libcli/security make sec_privilege_id() return SEC_PRIV_INVALID on failure.