split enable_random_syscalls in two

this function is a mess, and breaking it apart into pieces is the only way
it's going to get better.