usermode >= 1.94 supports file inclusion and provides /etc/security/console.apps/config-util. Please replace "USER=root" in your userhelper configuration file by ". config-util". See #426095 for motivation.
Really it would be nicer to get CUPS to allow console users to perform administration operations without requiring a password, but that still hasn't happened.