This is a terrible thing to enforce on people. Could we not just try to make an authorized request to systemd and see if it succeeds? That's the thing we're trying to make sure is possible, after all.