is `PERSONAL_RANDOM_KEY` anything a user needs to know about? should there be a comment above?