Make random_string cryptographically secure by default