It calls kdesu and remote (by default) the xon script, provided by x11-apps/scripts.
Carsten, are these optional run-time dependencies?
No response for two months.