In theory yes. In practice most of the tasks including key/password management is left on sysadmins anyway, because management don't bother and not even interes

In theory yes. In practice most of the tasks including key/password management is left on sysadmins anyway, because management don't bother and not even interested how this stuff works. They're just not technical people, their priorities are elsewhere. And that's ok.