diff --git a/src/org.freedesktop.NetworkManager.conf b/src/org.freedesktop.NetworkManager.conf
index bbcb5f5020..c88dfe7650 100644
--- a/src/org.freedesktop.NetworkManager.conf
+++ b/src/org.freedesktop.NetworkManager.conf
@@ -10,13 +10,9 @@
                        send_interface="org.freedesktop.NetworkManager.PPP"/>
 
                 <allow send_interface="org.freedesktop.NetworkManager.SecretAgent"/>
-
-                <!-- Allow NM to talk to known VPN plugins; due to a bug in
-                     the D-Bus daemon, when a plugin is installed and the user
-                     immediately tries to use it, the VPN plugin's rules aren't
-                     always loaded into dbus-daemon.  Those rules allow NM to
-                     talk to the plugin.  Oops.  Work around that by explicitly
-                     allowing NM to talk to VPN plugins here.
+                <!-- These are there because some broken policies do
+		     <allow send_interface="..." /> (see dbus-daemon(8) for details).
+		     This seems to override that for the known VPN plugins.
                   -->
                 <allow send_destination="org.freedesktop.NetworkManager.openconnect"/>
                 <allow send_destination="org.freedesktop.NetworkManager.openswan"/>
@@ -121,8 +117,6 @@
                 <deny send_interface="org.freedesktop.NetworkManager" send_member="Sleep"/>
                 <deny send_interface="org.freedesktop.NetworkManager.Settings" send_member="LoadConnections"/>
                 <deny send_interface="org.freedesktop.NetworkManager.Settings" send_member="ReloadConnections"/>
-                <deny send_interface="org.freedesktop.NetworkManager.VPN.Plugin"/>
-                <deny send_interface="org.freedesktop.NetworkManager.PPP"/>
         </policy>
 
 	<limit name="max_replies_per_connection">1024</limit>