What is PAM (Privileged Access Management)? A practical guide and free self-hosted options

Admin passwords in a spreadsheet. A contractor who still has SSH access six months after the project...