Reduce the access to phrik.archlinux.org to only demize by for now
defines arch_users in phrik's host_vars. Add a polkit rule to allow
users in the phrik group to restart phrik.