MacAddress or vendor identifier. You could also generate random... but it's a good idea to keychain it under its own namespace.