Salt filename encryption/decryption with secure_random