Updating expired certificate for existing service connection

I use **az devops service-endpoint azurerm create** with **--azure-rm-service-principal-certificate-path** to create a new service connection using certificates. But certificates expire after a few years and we want to keep service connections alive by creating new certificates.

There doesn't seem to be an "update" command for **service-endpoint azurerm**?

Is there a way to update certificate on existing service connection? Deleting and recreating isn't really an option because it would lead to manually fixing all the related pipelines.

---
#### Document Details

⚠ *Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.*

* ID: fa18e6e0-743a-1e6f-23a7-26460e2f9f27
* Version Independent ID: f05be940-a104-7cc4-1cd8-88046d3eac49
* Content: [az devops service-endpoint azurerm](https://docs.microsoft.com/en-us/cli/azure/devops/service-endpoint/azurerm?view=azure-cli-latest)
* Content Source: [latest/docs-ref-autogen/devops/service-endpoint/azurerm.yml](https://github.com/MicrosoftDocs/azure-docs-cli/blob/main/latest/docs-ref-autogen/devops/service-endpoint/azurerm.yml)
* GitHub Login: @rloutlaw
* Microsoft Alias: **routlaw**