Small update for this report. I submitted https://build.opensuse.org/request/show/1175593 to the devel project yesterday (not accepted yet) The privilege escalation mechanism is back and hotspot now uses pkexec