treewide: use get_random_bytes() when possible