SecureRandom and userland CSPRNGs in general are NOT secure, use /dev/urandom