This is (one example of) what the redacted send feature is for. Use redacted send to replicate the dataset minus the offending data, then replace the production version with the “redacted sent” version.
https://openzfs.github.io/openzfs-docs/man/8/zfs-redact.8.html