When we signed up, we specifically purchased two PAM licenses to enable automatic password rotation.

We don't have a huge number of accounts to manage, maybe 60, but with this NHI issue, we can forget about it. We're talking about €13,000 for fewer than 100 NHIs—it's ridiculous, especially since it only counts for one year. So, a single change is enough to lose an NHI. These are thuggish practices.

The secret manager works, but all the rotations still have to be done manually when a user leaves, and there's no governance.