use a modern minitest for consistent 1.9/2.0 behavior
require securerandom and alias as rand_s
1.8.7 compatibility