phlocale: users can set rtc

with phlocal any user can set the rtc clock. it’s an unsafe feature. how to disable it (maybe asking for root password?)?