Please create a separate user role which is able to manage all vaults like an vault-owner or vault-admin, can see all items in a vault, but is not able to reveal, copy or use any hidden field like the password filed.
Would be very helpful in larger organizations where the central IT creates and manages all vaults, but should not be able to see all passwords from all users.