you're getting the priv through a role. you have to have it directly to create a package...