Another possible good idea is to add an hmac to detect tampering. I know zf2 does this as do a few other implementations I've seen.