Correct the NetworkManager policy row, and assert the table at build
Read polkit's defaults off the machine, rather than off fw13 once in July
Check the installed machine's labels, and say how to repair one that is wrong