Issue: Account Owner Permissions & Vaults

We are evaluating 1Password and have the same exact concerns. 
The IT department would be in charge of overall administration of this, but we can't have a situation where the IT Director (in the "Owner" role) would have access to the vaults in the Finance Department, for example, that's just not acceptable for any of us.

I understand what Tom is trying to say, but I don't know how that would work in practice.
Yes, the "Owner" would be an account that was not an account used every day, but I don't see how you keep that under "lock and key".

Until this is figured out, we can't roll it out to a larger group.