Hello Rich,
The automation of the MIM Sync engine is limited. The rotation of password is not supported by design.
But, as you are using a custom MA: have you by any chance access to the source code?
If yes, you can implement a feature to request the password on third party vault that you handle the rotation for you.
BR,
Sylvain