This is along the lines of where I was going with the alternative approach, I just simplified it for brevity. :) In the case of teleport, I think this is a bit

This is along the lines of where I was going with the alternative approach, I just simplified it for brevity. :) In the case of teleport, I think this is a bit more difficult to achieve, because we don't necessarily have our own account database, our common commercial use case is integrated to an identity provider through SAML/OIDC, which I'm not sure would consistently offer a random id per account to use. While there are many way's we could generate and store the username <-> random id mappings, this adds a certain amount of complexity to get right on a distributed system. If building a system from scratch with end to end control, I do prefer the random identifier approach.