polkit.addRule(function(action, subject) {
    if (action.id == "com.zoneminder.policykit.pkexec.run-arp-scan" &&
        subject.user != "@WEB_USER@") {
        return polkit.Result.NO;
    }

});