In my experience the easiest way to work with a third-party is to share the passwords. If they are not following through on what you want them to do, find someone else and change the passwords. If not there tends to be too much red tape to get things done.