backport of upstream commits 9dca831, 4e67dde

Source: Fedora 43 polkit Security Advisory FEDORA-2026-0e9ef494fc