Maybe the program can take an integer nonce in addition. Then you have to track how many times you've used it for a particular domain.

And if the domain name changes: you just keep generating for the old domain and tell the program to override.

These seem like relatively simple challenges.