Also use KAuthorized::authorize for the other like it's in the docs! The porting was really messed up; will put that in a separate commit also.
Also, according to ksmserver code, "logout" restriction affects also shutdown/reboot which as of now is not enforced in Kickoff, only really logout is disabled.