If I set $cryptographicallyStrong to false, is it better to skip openssl_random_pseudo_bytes?