How do you change OUD extensions after a bindDN password change

I am using OUD 12c with 2 extensions configured.

Each extension uses the same service account to connect to Microsoft AD.

On a scheduled basis, I need to reset the service account's password.

If all the services are running and the extensions are enabled, once the password gets reset, the account gets locked out very quickly.

The only way I have determined to get things to work properly is by following these steps:

Using dsconfig, set enabled: false

Change the password

Update the credentials on the extensions

Re-enable extensions

Is there a better way to reset the credentials on the extensions?