Make it clearer that auditing the RNG of a hardware wallet depends on verifying that the device uses the right source code