Password rotation + keytabs replacement support

## Background
Introduce ability to rotate password (encrypted in keytabs) + create new keytabs with http/principals + replace in infra and restart service.

# Downtime considerations
Can we do this to minimize downtime?
