upgrade secure-random