How about both? Make everything a 256bit integer. Generate those from a hash of your string that can be found somewhere else. The point being that integers are easy to deal with (byte array really) but harder to collide giving permission for "bank/transfer" to an app requesting access to "garbage/spew".