[client] Categorize privileged tests behind a build tag and run them in Docker

[client] Categorize privileged tests behind a build tag and run them in Docker #16123