Yes. I've considered it. I think you're right, but I need to look into whether all the instances will be recycled and get the new env with the new secret value.
Have you had experience with changing secrets for already existing workers?