Comment 1 for bug 631619

The dialog has to appear, since we cannot allow applications to blindly change the software repositories.

You could add a custom privilege by a distro patch and allow it as an alternative to change-repository and install-or-remove-packages - similiar to the current single-auth patch. But the client would have to ask for authentication before launching the transaction, since the daemon doesn't know if the client wants to perform a purchase or not.

Would be "To install packages from new sources, you have to authenticate" an alternative?