Comment 8 for bug 229343

Indeed polkit-auth won't work, since the saned daemon is not tied to a ConsoleKit session (which the auto-ACL magic relies on). Your hal FDI solution sounds like the most appropriate approach, thanks for this.