Comment 2 for bug 1696504

Polkit allows fine grained API access control in libvirt: https://libvirt.org/aclpolkit.html However as we don't currently need ACLs I think it should be ok to use filesystem permissions, for both baremetal and containers.