Use ONID as CRID authority as last resort.
Add "onid-" as suggested by Adam