require basic local access to control the dwm session - no more menu prompts for rejectees