util: don't block on getrandom()
util: unify how we see srand()