use random device if sysctl doesn't have KERN_ARND