Sudo password for a single root-elevated command run. Set by the GTK permission UI when the user allows a high-risk prompt; consumed by run_command and cleared after use. Not serialized.