(#knlzd4q) @will@twtxt.net At work we are using KeePass with Multi Cert KeyProvider Plugin.

https://www.creative-webdesign.de/en/software/keepass-plugins/multi-cert-keyprovider

We leave master password empty. Each person needs an own certificate to access the database file.

Not using a master password makes it easy to add or remove people with access w/o changing (and sharing) a master password.