Gerenal user can reboot the computer by typing the 'reboot' in console
This is a feature, not a bug, since physical access to the console (and
keyboard, and usually
power switch etc), permits rebooting through other means that are not (and
cannot be) password protected.
FWIW, typing "reboot" on console as non-root user asks for the user's password