The greetd greeter session is inactive in logind, so polkit defaults require admin authentication for power actions. This rule grants the greeter user permission for reboot and power-off without authentication.
