This does not need to be cryptogrphically secure, and a little shorter
will be better when using the buildid in a path in subsequent changes.