[e1g]

OpenSSL is commonly available and can guarantee at least one "special symbol":

  openssl rand -base64 20

[pimlottc]

Hah! At first I was surprised they thought to guarantee at least one symbol, and then I realized you meant the base64 padding!