polkit.addRule(function(action, subject) {
    if ((action.id == "org.jjk.kalu.sysupgrade"
            || action.id == "org.jjk.kalu.sysupgrade.downloadonly")
        && subject.isInGroup("kalu")) {
       return polkit.Result.YES;
   }
});
