Should probably wipe out urandom_fd anyway here? How does OpenSSL react to _finish returning an error?