https://giantif.com/2011/12/20/iiwapbk-and-privilege-101/