Actually, pass has great support for teams. Dropping one or more GPG keys in ".gpg-id" will encrypt the passwords for the various identities. This works globall

Actually, pass has great support for teams. Dropping one or more GPG keys in ".gpg-id" will encrypt the passwords for the various identities. This works globally or per sub-folder. I use dedicated subkeys for work and mobile so that I don't have to share my main key, or indeed every password with every device.