Drain entropy on first boot and wait until new entropy becomes available.
Remove stored entropy from images.
Remove snakeoil certificate and key from image.
Do not try to start services during image creation.