prefixed encrypted id to allow real-id for specs