If we're generating full-length random secrets, we don't need to key-stretch them. Hashing them once is a good idea, though, so someone with a stolen copy of the database doesn't have enough information to log in, but we don't need to hash them more than that.