What to do if need to change vault_mysql_root_password and vault_users password after provision

I have provisioned the site with the default passwords by mistake

# Documentation: https://roots.io/trellis/docs/vault/
vault_mysql_root_password: stagingpw

# Documentation: https://roots.io/trellis/docs/security/
vault_users:
  - name: "{{ admin_user }}"
    password: example_password
    salt: "generateme"

I assume this is not secure, how do I re provision and change these, I tried changing them and provisioning but it fails.