[D8] Require password authentication before accessing sensitive pages

Patch #13 failed to latest 8.x-1.x-dev (Last updated: 23 Mar 2023 at 05:37 UTC)

Update patch.

The new Access Policy API in 10.3 looks interesting, not sure if it would be effective for this use
https://www.drupal.org/node/3385551 →

I think a couple challenges may be:
- If the access policy hides menu items and links to things a user should have access to once confirming their password (e.g. the user doesn't see an "Edit" tab on their account page)
- Altering the Access Denied page to provide a login form or redirecting them to a login form when necessary