Unified password dialog on startup.

Ask for password only once (on startup), not every time a privileged
action is about to run.

Sacrifice fine-tuned privilege escalation for the sake of simplicity.
I doubt any administrator will actually notice, plus the users won't be
confused with all these password dialogs.

We'll see how this idea pans out.