Instead we should use an unguessable token string like non-persistent notifications already do, from which the notification ID is re-calculated using the trusted origin (to prevent origins closing other origins' notifications in case of a compromised renderer).