It'd be worth including a comment that remarks that ohash contains an md5-hash, in which the letter X can never appear (because it's a hex string), explaining that the intent here is to render it invalid.