allow root to update/delete user connections

NOTE: this behavior may be subject to additional restrictions in the future,
like PolicyKit authorization.  In any case, when this was initially locked
down, we didn't have a use-case for root to modify user connections, and to
be conservative that was disallowed.  We apparently have a use-case now.