I think check-in [09db2a0a1b37532d] should address the predictability issue.

Also, I'm relatively sure that SAVEPOINT names are scoped to the connection (i.e.
two different connections could have the same SAVEPOINT name and they would not
be referring to the same SAVEPOINT).