they're an opaque identifier of a particular database transaction