-hex option for openssl rand