Can I ask what 700 shared folders are for?
We are trying to down play the use of shared folders in favour of named sharing, because for the average user it is hard for them to see the groups and other permissions applicable. For example if I share to a group called "Accounts", and someone leaves Accounts, someone else joins, it may be less apparent that they need to change that password or whose responsibility it is.
I do think the whole "Shared Folder" thing user experience is poor, and that for secrets we almost want a UI that tracks these types of changes, and alerts users which passwords may be known to people who have left, or just not changed since the last group change. Could be added to the scoring, might be determined from existing metadata.
The API does support getting information on shared folders but the documentation is spartan, we did use it for automatically sharing certificates to each user, in that case one shared folders and for each user we granted individual permissions to access the object to the admin and the user concerned within the folder. Probably not the most secure, but given how it was done before and what it was protecting perfectly fine.
