Patoberli, from your link I found this is the release notes, do you think this is what's prompting anyconnect keychain for password 3x?
Permission Popups During Initial AnyConnect HostScan or System Scan Launch (CSCvq64942)
macOS 10.15 (and later) requires that applications obtain user permissions for access to Desktop, Documents, Downloads, and Network Volume folders. To grant this access, you may see popups during an initial launch of HostScan, System Scan (when ISE posture is enabled on the network), or DART (when ISE posture or HostScan is installed). ISE posture and HostScan use OPSWAT for posture assessment on endpoints, and the posture checks access these folders based on the product and policies configured.
At these popups, you must click OK to have access to these folders and to continue with the posture flow. If you click Don't Allow, the endpoint may not remain compliant, and the posture assessment and remediation may fail without access to these folders.
To Remedy a Don't Allow Selection
To see these popups again and grant access to the folders, edit cached settings:
Open System Preferences.
Navigate to Security & Privacy > Privacy > Files and Folders > .
Delete folder access related cache details in the Cisco AnyConnect Secure Mobility Client folder.
The permission popups will reappear with a subsequent start of posture, and the user can click OK to grant access.
