My rule of thumb with 'databases' and 'fingerprinting' of any sort...if it can be read, it can be copied. If it can be heard, it can be duplicated. Pretty good rule so far. If there isn't a technique to duplicate something just yet, be sure to make that 'something' count as 'identification'. The technique will arise shortly.