Are there good examples of how to optimally design a program on #Linux that is meant to generally run in userspace, but occasionally requires to execute a root command in a way the user is *not* prompted by polkit every time out of the blue but only once when the program is installed?

A persistent polkit rule looks super icky (I don't see how I could prevent process impersonation, maybe I'm missing sth?). Is there any clean, standardised way for this?
#coding #Python