I haven't tried that. But I'm under the impression, when you use the operation replace, it should allow you to change the existing authorization type.
Otherwise, try this approach: create a new source connection with the new credentials, then do a PATCH on the dataflow, replacing the new source conn...