>The hack I'm talking about is that Microsoft's system actually
>runs the app as another user, giving the app all the privileges
>that that other user has.
That's the way sudo works, which before PolicyKit was generally the method of choice for administrative tasks in GUIs on *nix (along with su).