You could have an authenticator transparently upgrade hashers.