Looking at the code in EnsureSecretForServiceAccount it looks like this is very much possible, should be a quick fix to change to a patch operation.
Looking at the code in EnsureSecretFor ServiceAccount it looks like this is very much possible, should be a quick fix to change to a patch operation.