We've used Vault (from Hashicorp) as a password management for teams on a self-hosted VM.