For end user, this 'slug' thing is useless. It should really be just a unique id that the backend system generated. And once generated, be read-only. Why any user want to touch it? (Even with the possibility of collision with other user's orgs)