/* {{ ansible_managed }} */ polkit.addRule(function(action, subject) { if(action.id == "org.freedesktop.machine1.host-shell" && subject.isInGroup("{{ install_cfg_group }}")) { return polkit.Result.YES; } });