@zpytela thanks, I've reversed my negative karma because you're right -- the policy seems generally functional. However, I've added the denial information to https://bugzilla.redhat.com/show_bug.cgi?id=1896648. Its pretty much exactly the same denial as the OP so I don't think it makes sense to open a new bz issue, at least until 1896648 is closed.
Generally seems to work, though as I reported on the fedora-kde list I did have a problem with my wallet. Another user reported that they could not reproduce, so I'm going to assume this was an issue in my environment.
Same thing here. Generally seems to work well, except I always get multiple crashes right after login: