JSON merge patch on features, settings and providers (null removes a key); enabled and provider are set directly ("provider": null clears it). expected_version must be the version read; a document that moved on answers 409 and nothing is written.