I think there is no way, as secrets are hidden with authorization syntax.
I would go with the approach that I list mounts() and for each performs refreshMounts(), and if that fail (401), than updateMount() with new credentials.
My blog: https://databrickster.medium.com/