Bugfix: use Ruby's SecureRandom