In particular I'm thinking about usage by an implementation of `receive-pack` which needs to figure out if things have moved since the advertisement and maybe fail (lol HTTP tunnelling) if they have. This may be something that we should revisit, as you would have only got the id from a reference to begin with, but maybe the id has been stored/serialised somewhere.