polkit.addRule(function(action, subject) {
  var actions = ["org.debian.pcsc-lite.access_pcsc", "org.debian.pcsc-lite.access_card"];
  if (actions.indexOf(action.id) !== -1 && subject.active && subject.isInGroup("ykusers")) {
    return polkit.Result.YES;
  }
});