To avoid sequential short URLs, we probably want to obfuscate this somewhat. Perhaps XOR the counter with `0xaaaa` or something and shuffle the alphabet?