Security Considerations
It should not be assumed that UUIDs are hard to guess; they should not be used as capabilities.