pub fn fill_bytes(buf: &mut [u8])
Fill the buffer with cryptographically secure random bytes from /dev/urandom. If unavailable (e.g. non-Unix sandbox), fall back to a system-time-seeded LCG generator.