My understanding of `mcrypt_create_iv()` is that if you omit the second argument, it defaults to `MCRYPT_DEV_URANDOM`. If this is not correct, please provide a reference.