v0.1.5 — per-thread CSPRNG in non-fips std_shim (remove per-call getrandom syscall)