PS, forgot to mention: Something is fishy there anyway (independent of the polkit rules setup), because the connection is also successfully established if you do *NOT* enter the root password, but just click on Cancel in the root password dialog.