How to find all restricted pages in Confluence Cloud

The built-in report lists pages restricted directly, but not their child pages that inherit the restriction. Tested on a live Confluence Cloud site, with a script that finds both.