zoneminder/distros/redhat/nginx/com.zoneminder.systemctl.rules.nginx

polkit.addRule(function(action, subject) {
    if (action.id == "com.zoneminder.policykit.pkexec.run-zmsystemctl" &&
        subject.user != "nginx") {
        return polkit.Result.NO;
    }

});