Malware protection?

[memolus at googlemail.com]

Currently you have to enter your password each time you do an
"Password" action to verify that you trust this application and that
you want to have the authorization for a certain time frame. The
current policykit concept is already an redundant duplicity. In my
concept correctly installed applications are trusted by default (if
they are registered in /usr/share/polkit-1/applications).