backport of commit d444a32 (#27801)

Co-authored-by: John-Michael Faircloth <[email protected]>

website/content/api-docs/secret/databases/mssql.mdx

@@ -127,3 +127,10 @@ list the plugin does not support that statement type.
   base64-encoded semicolon-separated string, a serialized JSON string array, or
   a base64-encoded serialized JSON string array. The `{{name}}` value will be
   substituted. If not provided defaults to a generic drop user statement.
+
+- `rotation_statements` `(list: [])` – Specifies the database statements to be
+  executed to rotate the password for a given username. Must be a
+  semicolon-separated string, a base64-encoded semicolon-separated string, a
+  serialized JSON string array, or a base64-encoded serialized JSON string
+  array. The `{{name}}` and `{{password}}` values will be substituted. The
+  generated password will be a random alphanumeric 20 character string.