Security Considerations

It should not be assumed that UUIDs are hard to guess; they should not be used as capabilities.