Minor API break: the longer RandomKey sits there, the longer it gnaws at my soul as an odd exception to the naming rules; best to fix now