diff --git a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/package.mask b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/package.mask
index 2f252c78ed..b01f1b0e92 100644
--- a/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/package.mask
+++ b/sdk_container/src/third_party/coreos-overlay/profiles/coreos/targets/generic/prod/package.mask
@@ -4,7 +4,7 @@
 # We don't want to support interpreted languages, changes/updates we make
 # would have a high risk of breaking users.
 dev-lang/perl
-# TODO dev-lang/python
+dev-lang/python
 dev-lang/ruby
 
 # Since all SSL/TLS implementations are bad we minimize the number we ship.
diff --git a/sdk_container/src/third_party/coreos-overlay/sys-auth/polkit/polkit-0.113-r1.ebuild b/sdk_container/src/third_party/coreos-overlay/sys-auth/polkit/polkit-0.113-r2.ebuild
similarity index 100%
rename from sdk_container/src/third_party/coreos-overlay/sys-auth/polkit/polkit-0.113-r1.ebuild
rename to sdk_container/src/third_party/coreos-overlay/sys-auth/polkit/polkit-0.113-r2.ebuild
index 98f090b160..370c39e76c 100644
--- a/sdk_container/src/third_party/coreos-overlay/sys-auth/polkit/polkit-0.113-r1.ebuild
+++ b/sdk_container/src/third_party/coreos-overlay/sys-auth/polkit/polkit-0.113-r2.ebuild
@@ -18,7 +18,6 @@ CDEPEND="
 	dev-lang/spidermonkey:0/mozjs185[-debug]
 	>=dev-libs/glib-2.32:2
 	>=dev-libs/expat-2:=
-	introspection? ( >=dev-libs/gobject-introspection-1:= )
 	pam? (
 		sys-auth/pambase
 		virtual/pam
@@ -28,6 +27,7 @@ CDEPEND="
 DEPEND="${CDEPEND}
 	app-text/docbook-xml-dtd:4.1.2
 	app-text/docbook-xsl-stylesheets
+	introspection? ( >=dev-libs/gobject-introspection-1:= )
 	dev-libs/libxslt
 	dev-util/gtk-doc-am
 	dev-util/intltool