Features in KDE Base
Unified password dialog on startup.
Ask for password only once (on startup), not every time a privileged
action is about to run.
Sacrifice fine-tuned privilege escalation for the sake of simplicity.
I doubt any administrator will actually notice, plus the users won't be
confused with all these password dialogs.
We'll see how this idea pans out.