ZKPassport now derives its app-specific nullifiers through TACEO:OPRF, so no one, not even the issuer, can reverse or link them.
