Agree, there should be a child key that is derived using some public information from the service and has no visible tie to your main key.