def process_privileges(current_state, desired_state)
            return [] if desired_state.nil? && !current_state.policy.remove?
            account = desired_state || current_state
            current_privileges = current_state ? current_state.privileges : {}
            desired_privileges = desired_state ? desired_state.privileges : {}