No matter how nice they are, under no circumstances should keymashes be used as a source of randomness for cryptographic purposes.
This commit fixes #1. I admit i don't really know how dual BSD/GPL licensing works, so it's GPL only for now.