Yes this is possible. Using templates, the new passphrase will get pushed but the config will be mismatched. Post the change, please try and re-fetching the template to resolve the mismatch.
If you are having more issues, please post screenshots of what is happening.