they need to be hard to generate valid ones though, i don't think you've thought it through