Have also used 1password. It's great. It has an API that you can code against for automation, and you can also mirror some passwords / tokens into hashicorp vault.