Once a service account is created, there is no way to rotate the credentials linked with the service account unless you completely delete the service account and create it again. It would be nice to have either a UI element shown next to the service account that would allow admins to rotate the credentials (similar to how the port client secret already works) or an API to do so.