One sudo password covers 10 minutes in the same terminal
A fresh install's update asked for the sudo password three times at "Create system snapshot", and a password typed one command earlier never carried over. A change merged into quattro sets the timeout so one password covers 10 minutes in the same terminal.
The update still asks once up front, with a keepalive so a long download does not outlast the authorization. It runs in its own terminal, so a password typed in the calling terminal does not carry in.