Django 6.1's PBKDF2 default change rewrites existing password hashes on next login

Django 6.1 raised the default PBKDF2 iteration count from 1,200,000 to 1,500,000. I measured the extra cost per login, then found it rewrites every hash on next login, including ones an admin had deliberately hardened above the new default.