Replace group+serial by an opaque cookie.

Only the controller needs to know about what goes in there, so let's
make the client oblivious to that so we can make changes in fallback
assignment schemes without touching the client.