.withTargetId(targetId)
.create().iterator().next();
final Privilege privilege = privileges().get(saved.id());
assertThat(privilege, is(notNullValue()));
assertThat(privilege.description(), is("bar"));
// name is mangled on creation - "$name - ($method)"
assertThat(privilege.name(), is(saved.name()));
assertThat(privilege.methods(), contains("read"));