I have a fedora workstation pac connected to the living room tv, running some server duties in the house and playing games over streaming and on the tv it is connected to.

I want to forbid reboot/shutdown from the UI. I want only sudo in the terminal to be able to do that.

I'm no certain of the best way to do that. I cant go just hiding the options on a per UI basis as I'll be playing whack-a-mole until I'm dead. Instead, Id like things like plasma and steam to understand they aren't permitted to make that request, but if they try anyway, the OS just ignores them.