added explanation about why transaction-id needs to be un-knowable to
un-trusted applications.