It's not used unencrypted anywhere, so why limit to alphanum? Just use `Crypto.Random.get_random_bytes()`.