As long as we prevent

sub

collisions within the same issuer across clients and users should be okay