systemctl: by default interactively ask for polkit authorization, if possible

Also, allow using --no-ask-password to turn off ineractive polkit
authorization.
namespace: add missing 'const' to parameters
update TODO
execute: downgrade namespace error to "warning"

Also, extend the printed warning a bit, explaining the situation more
verbosely.