Don't feed a SecureRandom to SSLContext.init().