do not flush privileges: it's not required when you use GRANT/REVOKE, and requires unnecessary permissions