Throw when no CSPRNG is available.

This doesn't change anything for node or newer browsers, but will throw
an exception in older browsers. Hence a new major version number.