Remove at_console, ensuring that all necessary calls are protected by
PolicyKit authorization (which at_console is redundant with). Allows
sessions that are not necessarily local (like SSH or remote desktop)
to talk to NetworkManager, subject to administrator PolicyKit rules.