Description of problem: GPK uses policy kit and the default is set to retain the authentication permanently. I think that is unexpected behaviour. The default should be just to retain the authentication for the current session. I would prefer a option to retain for something like 10 minutes and the option to revoke it via a sys tray applet like how it was before. Additional info: This is potentially a policy kit issue. Feel free to reassign if that's the case.
You _can_ revoke your authorizations using polkit-gnome-authorization. But that is hardly a user-friendly solution. David had some plans to write an enduser frontend for authorization handling, but I don't know when that will show up.
*** This bug has been marked as a duplicate of 439844 ***