The blind-index marker for one keyed pair, so a row can be matched without decrypting. prefix keeps two domains' markers from colliding (an address search and a contact token never hash to the same value).