We've been looking into deploying Conjur (https://www.conjur.com https://www.conjur.com) for the SSH part of this question at least, as they provide a rotator w

We've been looking into deploying Conjur (https://www.conjur.com https://www.conjur.com) for the SSH part of this question at least, as they provide a rotator which doesn't require changes to our server build (i.e. no special PAM modules or the like).