Only check out PAM secrets used

[DevOma]

Now I would like to get your ideas on how to implement - if secrets are restricted we can't get the details without checkout / comment.

Would it be ok to set "Checkout" manually? Like a context menu "Checkout Secret" - then a dialog is displayed where to enter your comment - checkout is done - then you should be able to use that cred for connecting to any destination - afterwards you can select "Checkin" in context menu.