They send it once over the wire but salt it twice if the first attempt fails and the request originated from a mobile app. UX is all around us.