GeoServerMultiplexingPasswordEncoder(store.getSecurityManager(),store);
for (GeoServerUser user : store.getUsers()) {
if (encoder.isResponsibleForEncoding(user.getPassword()))
continue; // nothing to do
try {
String rawpass= mEncoder.decode(user.getPassword());
// to avoid password policy exceptions, recode explicitly
String encPass=encoder.encodePassword(rawpass, null);
user.setPassword(encPass);
try {
store.updateUser(user);