Hrm... if you call this outside of a scope, it would be nice if we fell back to real random (eg, could be a csprng if available) rather than alea.