How can an untrusted client prove that an ID isn't human meaningful?

I have a situation where an untrusted client is generating string IDs, but I don't want them to be human readable. They don't need to be crytographically random or even unique, I just don't want IDs like "idiot" to be accepted. How can I go about preventing this?