do not pretend to support -rand in apps

It is generally not possible to reseed the random number generator manually in LibreSSL.
Remove support for parsing the unused -rand option.
use BIO_write instead of an unchecked write()