Privilege escalation policy and desktop_admin_r