s/uuid/uid/
move from `uuidgen` hack to SecureRandom.hex(16) for uids