Move seed generation from Arc4Random's constructor to Random.$seed(...).
SecureRandom: like Java's but with SHA256.
Test SecureRandom.
Fix size when creating with array.
Use SecureRandom instead of Arc4.