You need to be able to automate 3 things: 1. Account pass retrieval 2. Account pass rotation 3. Account pass ref update (1) is how a user gets the pa

You need to be able to automate 3 things: 1. Account pass retrieval 2. Account pass rotation 3. Account pass ref update (1) is how a user gets the pass when needed (normal process or break glass debug). (2) is how the pass rotates to an unknown value, automatically, after the user is done with it. (3) is how the new value gets updated in references, without the user knowing the new value. At the root of any solution are answers to those 3 needs.