Use SecureRandom.base64