contents: Make /usr/bin/su just run /usr/bin/pkexec

This drops a setuid program and privilege escalation path from our
set.