arxid: keyed, non-enumerable ID obfuscation with a measured ARX-Feistel permutation

If your API exposes /users/1042, someone can request /users/1043. And /users/1044. Sequential integer...