Create a second user or password if the server allows it, point one service at a time, watch errors, then remove the old secret. Do this when you can watch logs. A single shared password changed in place will disconnect whoever still has the old value.