This will probably become really easy when you will be able to use a credential provider to a PAM vault or KMS system. This is work currently in flight, so stay tuned. 
Update: This is now available as Credential Provider integrations.
5 Likes