Our welcome card prints a five digit permit number that cannot tell you how many users we have

A one-shot card at the end of setup, gated twice (fifteen minutes on the server, one query parameter on the client), with its number derived from the account's UUID instead of counted.