Minor fixes.
Don't persist AEADCryptBucket's for now.
Make a global SecureRandom