dejank - You and Turbo have been very helpful and patient with me. I will try those things listed but I am beginning to see that, as was said earlier, policykit has a steep learning curve. If it doesn't work then I will just revert to a saved system image to undo anything and accept it s is.

The biggest thing I can take away from thia is: Make a really good sudo password and stick to using it on only my admin account. If others are in a non-sudo account then having a strong sudo / superuser password will make it much more difficult for them to gain control when prompted for elevated privileges.

Correct?

Although sudo does not have a password, just the accounts that you give (hopefully) partial permissions. Othewise you are correct. Remember, with that program you are meant to take advantage of fine grained configuration capabilities and give out only the permissions needed, to only the accounts that absolutely must have them. Remember the principle of least privilege.

I will mark this thread closed. It is close enough to solved for my needs. Thank you Turbo and dejank!