I accidentally printed a job on hold. When I went to the printer queue window to release it, cups-pk-helper asked me for the root password, even though it was my own job. It seems that it used the wrong action (job-not-owned-edit instead of job-edit) ?
Fixed in cups-pk-helper-0.0.4-7.fc12. cups-pk-helper was checking wrong policy.