diff --git a/modules/users.nix b/modules/users.nix
index 724504b..134e5d7 100644
--- a/modules/users.nix
+++ b/modules/users.nix
@@ -49,7 +49,34 @@
     enable = true;
   };
 
-  security.pam.services.default.unixAuth = false;
+  security.pam.services = builtins.listToAttrs (builtins.map (name: {
+    inherit name;
+    value = { unixAuth = false; };
+  }) [
+    "chpasswd"
+    "chsh"
+    "groupadd"
+    "groupdel"
+    "groupmems"
+    "groupmod"
+    "i3lock"
+    "i3lock-color"
+    "login"
+    "passwd"
+    "polkit-1"
+    "runuser"
+    "runuser-l"
+    "su"
+    "sudo"
+    "swaylock"
+    "systemd-user"
+    "useradd"
+    "userdel"
+    "usermod"
+    "vlock"
+    "xlock"
+    "xscreensaver"
+  ]);
 
   security.sudo = {
     enable = true;
diff --git a/modules/workspace/i3/default.nix b/modules/workspace/i3/default.nix
index 3430759..6cfa086 100755
--- a/modules/workspace/i3/default.nix
+++ b/modules/workspace/i3/default.nix
@@ -61,6 +61,10 @@ in {
             command = "border pixel 2px";
             criteria = { window_role = "popup"; };
           }
+          {
+            command = "floating enable";
+            criteria = { app_id = "org.kde.polkit-kde-authentication-1"; };
+          }
           {
             command = "sticky enable";
             criteria = { floating = ""; };
@@ -72,7 +76,7 @@ in {
         { command = "${pkgs.kdeconnect}/libexec/kdeconnectd"; }
         {
           command =
-            "${pkgs.mate.mate-polkit}/libexec/polkit-mate-authentication-agent-1";
+            "${pkgs.polkit-kde-agent}/libexec/polkit-kde-authentication-agent-1";
         }
         {
           command =