BN_rand_range() needs a BN_rand() variant that doesn't set the MSB.