The Packagekit polkit policy is completely desktop-centric and expects that the user (admin or not) is logged in an active local session (ie: a seat in logind parlance, with a monitor and keyboard).
This prevents use of PackageKit when logged in via ssh (and using pkttyagent as your polkit agent) or via Cockpit.
The <allow_any> tag in polkit policy applies to non-local sessions. It should be set to something other than 'no' unless the action directly affects hardware of the login seat.
The attached patch fixes this issue.
Created attachment 98447 [details] [review]
policy: Make the polkit policy not be desktop-centric
The polkit policy should allow admin users logged in via ssh
or Cockpit (for example on a server) to perform the actions
in question. The <allow_any> applies non local sessions.
Pushed to master, thanks.