docs: mention the audience for authorization rules

Signed-off-by: David Zeuthen <zeuthen@gmail.com>

docs/man/polkit.xml

@@ -503,6 +503,19 @@ System Context         |                        |
       (in other words, the JavaScript interpreter used may change in future versions of polkit).
     </para>
 
+    <para>
+      Authorization rules are intended for two specific audiences
+    </para>
+    <itemizedlist mark='opencircle' spacing='compact'>
+      <listitem><para>System Administrators</para></listitem>
+      <listitem><para>Special-purpose Operating Systems / Environments</para></listitem>
+    </itemizedlist>
+    <para>
+      and those audiences only. In particular, applications,
+      mechanisms and general-purpose operating systems must never
+      include any authorization rules.
+    </para>
+
     <refsect2 id="polkit-rules-polkit">
       <title>The <type>Polkit</type> type</title>
 

docs/polkit/overview.xml

@@ -196,6 +196,16 @@
           </para>
         </listitem>
 
+        <listitem>
+          <para>
+            <emphasis role='bold'>DON'T</emphasis> include any
+            authorization rules with your application as this is only
+            intended for administrators and special-purpose operating
+            systems / environments. See <xref linkend="polkit-rules"/>
+            for more information.
+          </para>
+        </listitem>
+
       </itemizedlist>
     </simplesect>