switched to hex until we can prove random bytes are safe