Use openssl_random_pseudo_bytes where possible