Which three statements are true about the working of system privileges in a multitenant control database (CDB) that has pluggable databases (PDBs)?