3 ms·

I would assume the authentication happens in polkit, so a fake client would only be able to run a command if it had the necessary credentials.