New users and password changes should be applied, but updaging all users all the time would waste processing.