Push SecureRandom dependency down to the builder

SecureRandom is part of ruby corelibs -- I don't think we need to
explicitly test it, just use simple DI to make it testable.

Allows us to further simplify the wiring.
Prefer double-quoted strings