It'd require some internal discipline, but I wonder if you could just build a rough checkin/checkout system for account credentials