It really is all privileges, including setting keys and
disallowing the propagation of the principal database.
m [Dis]allows the modification of principals or policies
p [Dis]allows the propagation of the principal database (used in :ref:`incr_db_prop`)
s [Dis]allows the explicit setting of the key for a principal
- x Short for admcil. All privileges
+ x Short for admcilsp. All privileges
\* Same as x.
== ======================================================