Why UUIDs won't protect your secrets
UUIDs and Indirect Object Reference
alexsci.com