mdm privilege escalation