The KCM allows user to authorize and store (or forget) the authorization
of Thunderbolt 3 devices. This is done by communicating with the Bolt
daemon via DBus (throug libkbolt).
The KDED module listens for new unauthorized devices and shows a
notification with a button to authorize when such device is connected.
Obligatory screenshots:
{F6643680}
{F6635384}
See https://mail.kde.org/pipermail/plasma-devel/2019-February/093482.html for details and a link to a video.