curvetun: Fixed client initial message padding randomization

secrand() returns a signed integer, which was being taken modulo 
200 and used as a padding amount for the connection initialization.

When the result was negative this resulted in a negative padding 
amount, which subsequently caused segmentation fault during memset.