update key signing to use new SecureRandom

...and throw an error if you try to use the old, non-secure random number
generator.