Created attachment 143719 [details] Screenshot See screenshot attached. Instead of /tmp/mozilla* if we could see that it's in a Firefox temp directory, we could therefore determine that it's a "Firefox Download" and use that instead, nicer for user than some random tmp dir that most users won't even understand. Second, is the app name. It shows the org.kde.Tok name, the pretty name could potentially be extracted from the .flatpak file and displayed instead. If both were implemented it could show something along the lines of "Authentication is required to install Tok from Firefox Downloads."
This is coming from flatpak upstream, can you please report there? Or maybe suggest a patch? https://github.com/flatpak/flatpak/blob/master/system-helper/org.freedesktop.Flatpak.policy.in#L127 I doubt we'll get to be able to call it a "Firefox Download" though.