tighten up polkit-auth, implement in hostnamed.c