use a better random with SystemRandom (CVE-2013-4347)