Split the distribution independent database from the access policy rules. This avoids warnings due to granting permissions to the commonly unknown plugdev group, and allows simple overrides of the used access policy.
Stefan Brüns