[mmebane]

That's part of it. Another concern was ensuring that fetching a random number couldn't fail due to file descriptor exhaustion. [1]

[1]: https://lwn.net/Articles/605828/