stubbing out crypto/rand
use relative import paths