Create unique StdRng instances for arguments of run_inc

The old implementation used to work because Rust allowed some unsound
behavior by closures.