No I mean I already have two physically separate servers; one with the web service (Apache/Nginx + Rails/PHP/whatever), one with the database. The webserver handles the hashing of passwords as they come in, then sends it to the database for storage.

You're starting make me feel odd for not having the database on the same server as the web service now. I feel we've probably got some crossed wires here...