Constant POLICY_PATH 

const POLICY_PATH: &str = "/usr/bin/scxcli";

Where the shipped polkit policy expects scxcli. A scxcli found elsewhere still runs, but polkit then matches no action and pkexec falls back to asking for an administrator’s password for everything.