There is a buggy limitation with pkla files on openSUSE, that blocks
using 'unix-group:libvirtd' from working. A pkla with such a matching
identity will be overruled by the pkla generated by polkit-default-privs
containing 'unix-group:*' (which will match the other groups the user
belongs to, likely after matching libvirtd).
To work around this, explicitly allow the user instead.
Also, move the creation of the libvirtd group a bit later, to clarify
the code.
Change-Id: Ia3e4ae982accfc247a744eaa6d6aa4935e4f404c
f1c094cbcd