Use a cryptographically secure password-hashing scheme for users.
Use a cryptographically secure RNG for probe HMACs.
Merge pull request #1 from liamja/harden

Hardens the API, will be merged into 1.2 spec.