There is a possible configuration fix for this. Install policykit-1-gnome. Ensure 'PolicyKit Authentication agent' is checked in 'Application Autostart' in 'Session and Startup'. Logout and log back in to xfce4 session. pkexec apps now launch OK.