rand was already using optional_crypto (see imports)