My reading of the OpenSSL engine API says that it provides a new functional reference when you call ```ENGINE_get_default_RAND```. This means we need to call ```ENGINE_finish``` to release that or else we leak memory. Confirmation of this being true would be good. :)