don't use cryptographically random data