Configuring ExtensionProviders after installation

In our team, Istio is configured and deployed via Helm in our cluster, including our ingress gateways. We want to add an externalProvider for Virtual Servic

Our team wants to add an external authorizer (Istio / External Authorization) but the steps require you to edit the mesh config (or add an annotation to the ingressgateway pod)

Is there a way to do this dynamically / via CRD? It’s difficult for us to manage this at installation time due to how our environments are set up.