[robmccoll]

You could have a larger range than domain and throw in some noise. Exact match queries would need to become range queries that are de-noised at decryption.