Quite an interesting conversation evolving on on oss-sec at the moment about whether moving privilege escalation into DBUS and prohibiting apps running as root is actually a sane move. My inclination is also very much toward DBUS being the wrong place. https://mailarchives.bentasker.co.uk/Mirrors/OSSSec/2019/07-Jul/msg00023.html