I have no practical experience yet, but i evaluated the market for a password sharing solution for a team with similar requirements within an enterprise.
It uses a public/private key approach, where the plain passwords never leave the local machine and shared passwords are re-encrypted with each users public key.
I have been using Insomnia for a few years now but was blown away when a colleague told me i could right click the send button and get some additional features... Crazy UI anti pattern. There is no hint that this button has a secondary functionality.
I usually do that as well. But sometimes the properties of a product are not maintained correctly and you might miss out on certain manufacturers completely. Last time this happened to me was when looking for a new TV. Sony was completely filtered out although some of their TVs had all the features i was looking for.
TLDR: The (wrong) filter settings might make you blind for the whole range of the market.
I once had a similar situation with the question "Is everything OK?", which is slightly different from "How are you?".
I am a German living in Germany and i once caused a car crash that made another car spin into the ditch on the side of the road. That car was driven by a family of Russian heritage.
After getting out of the car i spoke to the other parties wife first and I asked "Is everything OK?" with what i ment: "Is there something very wrong beyond the things that are obviously wrong. Like, is your child bleeding to death or is it only the car damage."
But the woman did not understand it this way at all and was a little bit furious because to her obviously nothing was OK.
Of course she had every reason to be upset, but the likelihood of a German interpreting my question in a rude way would have been way lower.
To get production EXPLAINS for problematic queries you can activate auto_explain on a postgres instance. For my transactional system i have set it up to log EXPLAINS for all queries that take more than 2000 ms.
Another option in that area is https://www.passbolt.com/
It uses a public/private key approach, where the plain passwords never leave the local machine and shared passwords are re-encrypted with each users public key.