Utilize SIEM alerts for automatic release of exclusive accounts according to PSMDisconnect events.
This is achieved by establishing a dummy Syslog server (C#) that initiates a PACLI process which releases the accounts whose connection has ended and creating a least privileged PACLI user with the only ability to release objects.