Introduce EncryptedPKModel.

The model supports additional 'encrypted_id' property that does create
unique non-sequential hex-identifiers from field identifiers.
activation: use encrypted_id for activation token.
Merge pull request #33 from mgorny/encrypted-pk-model

Encrypted pk model