Dublin bike hire does it, including shuffling the numbers. I could almost understand it at the terminals at bike hire points, but they do the same on their web interface.

Of course the real insecurity is they assign you a fixed numeric 6 digit PIN.