An interesting thing I found while testing my install script on Silverblue is that rpm-ostree now requires your password. Previously, users in the wheel group could use rpm-ostree with no password due to the polkit configuration.