You could just use `SecureRandom.uuid`, no?  That's part of STDLIB and wouldn't introduce any new deps...