o Always use @PACKAGEKIT_USER@, never explicitly specify root.
o DBUS denies requests by default anyway, no need to explicitly deny.
o packagekitd and the DBUS backends both run as PACKAGEKIT_USER. If
you want different users, you'll have to fix that.