polkit WIP: enable forgotten config for NetworkManager

and only authorize "active" sessions.