improve initialization and thread safety for default crypto provider
mutex around RAND_bytes()