Basically it just removes SUID bit from /usr/bin/pkexec binary.
Could be useful, when you have a big park of personal PCs without orchestrated access and you don't want to share a root password with users. Or you are just a Robin and want to pwn victims to help them.