main: use /dev/urandom by default