Password prompt always asks for specific user's password, regardless for which user command is executed

[PookyFan]

This is very strange and most probably not related to ego itself, but I'm really clueless as of why this happens, so maybe I'll get some advice on that. Can't find anything in the web about this.

So my setup is as follows: I have sudoer user pookyfan on my machine, and two regular (ie. non-sudoers) users, let's call them bob and alice. The problem is that no matter which account I use to run a command for another account, the password prompt windows is always for my pookyfan user. So even if I'm logged in to desktop as bob and execute ego -u alice nemo, the prompt asks for pookyfan's user password.

I did install this app as suggested on project's front page (so with cargo and then copied binary to /usr/local/bin). My system is Debian 13, and I tried this on both Gnome/Wayland and Cinnamon/X11.

[PookyFan]

After some digging I think I partially figured it out.
Every method of running target command with ego, including default machinectl method (which I will be focusing on from now on) is considered "administrative action" and as such requires administrator credentials. Looks like by default the prompt defaults for first sudoer, which is my account. With polkit rule described in README, I can skip this prompt altogether.

But for me the logical consequence of running a command from other user's account is authenticating as the target user before actually executing the command. If I am an administrator, I could just change to another user's account with sudo to skip this step, but that should be impossible for regular users. Setting up abovementioned polkit rule is kind of like just using administrator authority to change accounts, just with admin password prompt skipped, and as I said I don't think this should be possible if I am using ego from regular user's account.

Could you add authentication step for target user when running ego? This probably should be done separately from actually executing the command (ie. first show user prompt for password of target user, and only if successfully authenticated actually run the command).