v0.1.4 — per-thread CSPRNG default rand (remove per-call getrandom syscall)