use a more random key for encryption

fixes #2393