Before version 4.3.0 (old src) the hashPassword() hook function accepted and handled multiple users in one create operation. Now (current src) it (silently) leaves data alone when an array of elements is passed to it.

In order to be consistent with the documentation I think the old functionality should be restored.