I guess we should plug Pi::rng into this; I don't know whether/how the system rng is seeded.