A privilege description is simply a conjunction of disjunctions.
Unlike (actually minted) privileges (see
descriptions may be created by untrusted code.
A privilege is a minted and protected privilege description
DCPrivDesc) that may only be created by trusted code or
delegated from an existing