fixes #5922 - compute resource #random_password to use SecureRandom()

.hex will produce pairs of characters, so it's still 8