x0's algorithm was secure_hash(md5(pass), salt), you already have md5(pass) so this can be done in one bulk update.