Each secret must be individually set to require check out:
From the Secret View page, click the Security tab to modify a secret's Check Out setting.
You must configure RPC before Change Password on Check in can be set.
Enable Require Check Out to force users to check out the secret before gaining access.
Enable Change Password on Check In to have the password change after the secret is checked in.