Use Random rather than Cryptokit.Random as the latter contains Unix calls which sometimes block on e.g. reading /dev/random :-(