routines to mint and manage nice opaque identifiers John Kunze <jak@ucop.edu>