diff --git a/policy/modules/system/userdomain.if b/policy/modules/system/userdomain.if
index 750fb9f5d..1186ca9dd 100644
--- a/policy/modules/system/userdomain.if
+++ b/policy/modules/system/userdomain.if
@@ -1232,16 +1232,16 @@ template(`userdom_unpriv_user_template', `
 	')
 
 	optional_policy(`
-		systemd_dbus_chat_logind($1_t)
-		systemd_use_logind_fds($1_t)
-		systemd_dbus_chat_hostnamed($1_t)
-		systemd_write_inherited_logind_inhibit_pipes($1_t)
-
 		# kwalletd5 inherits a socket from init
 		init_rw_inherited_stream_socket($1_t)
 		init_use_fds($1_t)
 		# for polkit-kde-auth
 		init_read_state($1_t)
+
+		systemd_dbus_chat_logind($1_t)
+		systemd_use_logind_fds($1_t)
+		systemd_dbus_chat_hostnamed($1_t)
+		systemd_write_inherited_logind_inhibit_pipes($1_t)
 	')
 
 	# Allow controlling usbguard