Clients that use saslStart to begin the authentication process may either specify that privileges should be automatically acquired for the authenticated user, or that the client will explicitly enumerate its required privileges. In this latter case, commands are needed to acquire and release privileges on a connection.