Generally you generate a random UUID which is quite difficult to enumerate.