[pavel_lishin]

Why does it have to be deterministic per-user? Why not completely randomized across every user?

[cwkoss]

I guess depends on the application. Consistent offset would allow measurement of distances, but that does leak some information, so perhaps all-random is better for many uses.