moving srandom_init before chroot

This should fix #394 as srandom_init must be called before chroot (no random/urandom in chroot).  Side note we should keep the FD open to make use of it later, but I will do that another time.