Thoughts and reviews about Passbolt? TOTP handling seems a bit off, extensions are not mostly read-only (OK for me). But the "share a single secret" access control seems nice:

https://www.passbolt.com/pricing/pro

https://www.passbolt.com/vs/bitwarden/overview

https://www.passbolt.com/docs/hosting/install/

PHP backend (IMHO a downside): https://github.com/passbolt/passbolt_api. But There appears to be a significant amount of auditing behind Passbolt's security claims, assuming the information on https://www.passbolt.com/security is accurate.