egg-libgcrypt: Prefer the kernel as direct entropy source
libgcrypt defaults to an userspace RNG, as such it is unable to discard its buffer on the required events such as suspend/resume/vmfork/other-corner-cases as information to do so is unavailable to userspace. Prefer the system RNG, which is a simple wrapper around getrandom/getentropy