Discovered apparent bug in Salesforce's criteria based sharing in which criteria based sharing rules don't apply immediately on records created from a trigger causing hard-to-troubleshoot "Insufficient Privileges" errors. Owner-based sharing rules do work correctly.