soios/os/layers/contestant/includes.chroot/etc/polkit-1/rules.d/50-lockdown.rules

// Show a root password prompt for these actions:
// - change network settings
// - hibernate
// - change package download proxy
// - mount removable storage, perform other disk operations

polkit.addRule(function (action, subject) {
  if (
    action.id.indexOf("org.freedesktop.ModemManager1.") === 0 ||
    (action.id.indexOf("org.freedesktop.NetworkManager.") === 0 &&
      action.id !== "org.freedesktop.NetworkManager.wifi.scan") ||
    action.id === "org.freedesktop.login1.hibernate" ||
    action.id === "org.freedesktop.packagekit.system-network-proxy-configure" ||
    action.id.indexOf("org.freedesktop.udisks2.") === 0
  ) {
    return polkit.Result.AUTH_ADMIN;
  }
});