Is there a way to update Service Connection Credentials during deployment

Summary:

Content (required):

Is there a way to update the credentials for service connections before running build jobs in an automated fashion rather than having it in Code as a different Application Profile?

I know that we can use 'Application Profiles' to configure different servers for different instances. And if the Auth is 'Cloud Account' then there are no issues at all.

But in cases where the Auth is 'Basic' or 'OAuth', client would not feel comfortable entering those details before hand and would want to control that as part of deployment process by their Ops team. Is there any suggested approach?