Lockdown mode vs. Changing Root Password

Our internal security department has always asked us to use Lockdown Mode on our ESXi hosts.  Which I agree is a great way to manage the use of the Root user on ESXi.  We also use a password vault that changes shared account passwords on a set period (or withing 4 hours of use).  Our auditors like to "ding" us for not having the password vault manage our root passwords.  But with the use of lockdown mode this isn't possible.  At least not without significant programming.  Anyone else run into these issues?

Thanks,

Doug