wip(api): add secure random;