t.privileged not updated in policy.substitute

[Cjen1]

    Log.info (fun m -> m "Policy.substititue %a for %a" pp_ip old_ip pp_ip new_ip) >>= fun () ->
    if PrivilegedSet.mem (SrcIP old_ip) t.privileged then begin
      PrivilegedSet.remove (SrcIP old_ip) t.privileged
      |> PrivilegedSet.add (SrcIP new_ip)
--    |> fun npriv -> t.privileged <- t.privileged end;

It appears that the last line should be fun npriv -> t.privileged <- npriv since npriv is the accumulation of all the changes above it.

(additionally subsequently matching is done on the old_ip to update it, should it not match on name?)