LOL... I once worked on a system where database records were inserted with a spacing of (1,3) so that there were intentional gaps... this was then encoded base36, and with a non-standard character order. The idea was to limit casual users from changing the /path/to/:id ... it worked pretty well in practice. It was emphatically NOT encryption though, just obfuscation, there was no real risk involved.