Add rng::bytes() as a safer version of rng::fill_bytes()#716