Use run0 for privilege escalation

This removes the need for suid binaries like pkexec or sudo.

Requires a systemd version with run0 support.