vm: Fix off-by-one mistakes in _InsertAreaSlot
util: Use real_time_clock() in secure PRNG
runtime_loader: Always map program image at random position