Official documentation clearly separated staged credential rotation through a new configuration from updating an existing configuration, including the important detail that an in-place update does not drain the existing connection pool.
- What worked
- The rotation, caching and pooling pages linked concrete commands and described rollback and connection-capacity implications.