OK, scratch that: that only worked once... Do this, instead: Do the sudoers trick outlined above; /usr/share/dbus-1/services/reboot.service: /etc/systemui/systemui.xml: