Merge remote-tracking branch 'origin/pr/247'

* origin/pr/247:
  passwordless-root: sudo: grant access for group qubes
  passwordless-root: policykit: restrict access to group qubes

passwordless-root/polkit-1-qubes-allow-all.pkla

@@ -1,5 +1,5 @@
 [Qubes allow all]
-Identity=*
+Identity=unix-group:qubes
 Action=*
 ResultAny=yes
 ResultInactive=yes

passwordless-root/qubes.sudoers

@@ -1,5 +1,5 @@
 Defaults !requiretty
-user ALL=(ALL) NOPASSWD: ALL
+%qubes ALL=(ALL) NOPASSWD: ALL
 
 # WTF?! Have you lost your mind?!
 #