Comment 3 for bug 1930545

That probably makes sense the most - I did not consider creating polkit inside a container. One obvious workaround / feature could be allowing users for disabling polkit support in libvirt and control socket access using regular filesystem permissions.

Also, I did not check the behaviour on Ubuntu yet.