Use UUID not counter so that reply addresses are not guessable