The canonical solution that the Wiki suggests (which seems like a fairly good idea to me) is to make your "serial" number an encryption of the actual serial number; that way your tooling can still get the real ordering, but customers will find it computationally hard to get that information.