Auto-detect RNG

If no RNG is configured, or the RNG is configured as "auto", we'll try
the 'safe' options one by one until one works.

We won't try /dev/random, even though it provides the best possible
entropy, because it will block on most systems if available.