I think password saving would be a bad idea from a security stand point and I would rather not start applying such things. But, I think I can get it to prompt each time if necessary, in line with how you would normally be prompted to submit credentials - i.e. using a standard secure entry window (from Apple).
I’ve put together a quick test version I would like you to try. It is working for me, but I’m not the best test case as it works for me normally.
Install the workflow, and trigger a forced beta app update via the keyword drbetasudoforce. When you run it you should get a credentials prompt at the stage of replacing the Drafts app.
> Please let me know the result.
I currently have plans to put out an update for the workflow next weekend. I already have a few new things in the pipeline for it, and should be able to add this functionality in (with an admin privileges check) assuming it is indeed a viable solution.