@steter I wonder if there is a policykit configuration which will make that go away for someone logged in at the console