After deeply checking about the fuzz on bug # 534047 , I think the reaction is exaggerated. The default policy from PolicyKit applies for single user that can install signed package from official repository without root password but unsigned packages need authentification. Grab any unsigned package and test yourself . For multiple user account, setting policy is the key.