Use SystemRandom which in turn uses `os.urandom`

Because it's more secure to use `os.urandom` than the pseudo-random &
repeatable normal random module functions.