A few years ago I stoped someone from implementing that.  The problem is if you intercept the hash you can use it like a password because the system at the other end would never see the original password.