better safe than sorry on XEN (no entropy there yet)