feat: turn on sudo and admin prompts by default

src/lib/config.sh

@@ -124,8 +124,8 @@ fu_config_load() {
 
 	_fu_kv_lookup "$FU_CONFIG" Enabled no;          CFG_ENABLED=no;  fu_is_true "$FU_KV_VALUE" && CFG_ENABLED=yes
 	_fu_kv_lookup "$FU_CONFIG" LockScreen yes;      CFG_LOCK=no;     fu_is_true "$FU_KV_VALUE" && CFG_LOCK=yes
-	_fu_kv_lookup "$FU_CONFIG" Sudo no;             CFG_SUDO=no;     fu_is_true "$FU_KV_VALUE" && CFG_SUDO=yes
-	_fu_kv_lookup "$FU_CONFIG" Polkit no;           CFG_POLKIT=no;   fu_is_true "$FU_KV_VALUE" && CFG_POLKIT=yes
+	_fu_kv_lookup "$FU_CONFIG" Sudo yes;            CFG_SUDO=no;     fu_is_true "$FU_KV_VALUE" && CFG_SUDO=yes
+	_fu_kv_lookup "$FU_CONFIG" Polkit yes;          CFG_POLKIT=no;   fu_is_true "$FU_KV_VALUE" && CFG_POLKIT=yes
 	_fu_kv_lookup "$FU_CONFIG" LockScreens yes;     CFG_LOCKERS=no;  fu_is_true "$FU_KV_VALUE" && CFG_LOCKERS=yes
 
 	_fu_kv_lookup "$FU_SYSCONFIG" Liveness light;   CFG_LIVENESS="$FU_KV_VALUE"

src/lib/menu.sh

@@ -306,8 +306,8 @@ FU_SETTINGS=(
 	"user|LockWallpaper|path||Wallpaper||LockScreenStyle=own|ownlock"
 	"user|LockBlur|bool|no|Blur the wallpaper||LockScreenStyle=own|ownlock"
 	"group|Password prompts"
-	"pam|sudo|bool|no|sudo in a terminal"
-	"pam|polkit-1|bool|no|Admin prompts"
+	"pam|sudo|bool|yes|sudo in a terminal"
+	"pam|polkit-1|bool|yes|Admin prompts"
 	"pam|lockscreens|bool|yes|Lock screens|||lockers"
 	"sys|SshSessions|bool|no|In SSH sessions"
 	"group|Recognition"

src/lib/pam.sh

@@ -114,6 +114,12 @@ fu_pam_lockers_enabled() {
 	(( found ))
 }
 
+# fu_pam_available <service>
+# Whether the service has a PAM file here at all.
+fu_pam_available() {
+	[[ -f $(fu_pam_etc "$1") ]] || fu_pam_vendor "$1" > /dev/null
+}
+
 # fu_pam_enabled <service>
 fu_pam_enabled() {
 	local file