Ah, just found it - apparently, I restrict access to the page in the general settings, and then in the settings of the individual post, I can set access to "public". Then the page itself is still password-protected, but the text is now included into the API call.