This can only be fixed with a crypto hash function, that IMHO would be a premature optimization here. Users having this potential problem (key names are result

This can only be fixed with a crypto hash function, that IMHO would be a premature optimization here. Users having this potential problem (key names are result of external user inputs) can simply prefix the key with HMAC(key,secret) truncated to a few bytes.