It looks like what short of authentication is required to change the system clock is now configurable in System -> Preferences -> Authorizations. -B.