maybe use something like an HMAC where your npub is concatenated with the hash of the onion messages and hashed. that way it's deterministic, unpredictable, and associated to a known (to the mint) identity