Is it always the master node whose Random instance we'll use? Random by default uses currentTimeMillis as a seed, so I just want to make sure that no two instances with unlucky timing or misconfigured clocks can end up with the same seed. If that turns out to be a problem, then we can replace the Random instance with a SecureRandom instance, if I'm not mistaken.