polkit is so obviously a system intended to replace Group Policy. But people have been doing this for decades and still not achieved widespread switchover from AD. You still have to piece it together yourself.