pickrand.go: use cryptographic randomness