Variable addresses Add a nonce to the address meaningless varying data Limits the exposure of a given address may permit tracking leaks how frequently to change it? is a sequence number adequate? or unpredictable number series?