Enter ADMIN_SECRET once. A signed HttpOnly cookie keeps you in for 7 days so admin URLs do not need ?key=.
ADMIN_SECRET
?key=
Sign in