Accomodate more than one privilege at once in <privileges/>

This is needed for at least DavMail, that returns more
than one privilege in the <privileges/> tag in response
to current-user-privilege-set requests. Not sure if
this is RFC3744 compliant, but it's a painless fix.

BUG: 303861