add lcrypto and change dns resolver to use secure rng