Acabei de escrever um wrapper simples:
cat / usr / bin / sudo-askpass
#!/bin/bash
zenity --password
cat / usr / bin / keepassxc
#!/bin/bash
SUDO_ASKPASS=/usr/bin/sudo-askpass sudo unshare -n sudo -u $USER /usr/bin/keepassxc.original $KEEPASSX_FILE
Eu tive problemas com pkexec e gksudo / gksu.