>> So those are definitely different privilege states, but they look
>> the same.
>
> Please find attached a patch to fix this.  Would this be a
> back-patchable bug?
My 0.02€: this creates an exception for anyone trying to parse the output.
I would have preferred empty logically meaning no rights, and the default 
being spelled out explicitely.
-- 
Fabien.