random.cfg: add subject: must