Global password is requested multiple times for every protected page

Is this different than ✨ Access to multiple pages with a one password Needs review ?

This is a re-roll of #8, which sounds like the better approach compared to #9 which removed the config part (form and schema). Patch applies to current dev and to 8.x-1.6. Seems to work as expected.