acs_privileges table has pretty_name but its never set for any privilege.
The acs-subsite permissions include assumes all privileges are under acs-subsite to generate a message key to get the pretty name.
Any reason we are not storing the message key in pretty_name?
You notice this when using the forums package which defines its own privileges.