1.) haven't ever thought about whether /dev/random is reliable in a VM environment.