I wonder if it'd be cleaner to just open `/dev/urandom` and read bytes from there?