> just keep on making completely new aliases The problem with most of those tricks is that they can be countered in some way, so I feel this is one of the area

> just keep on making completely new aliases The problem with most of those tricks is that they can be countered in some way, so I feel this is one of the areas where your security has to rely to some extent on obscurity (or the fact that it's too rare in the wild to be worth countering). But I do have a question, have you found a programmatic way to create aliases / a provider that offers an API for that? Because that seems like one of the main usability downsides to your approach.