Also, should we use &#x2F;dev&#x2F;urandom (on the host) to seed the CSPRNG in virtual machines?  <a href="https:&#x2F;&#x2F;lists.gnu.org&#x2F;archive&#x2F;html&#x2F;qemu-devel&#x2F;2016-04&#x2F;threads.html#02486" rel="nofollow">https:&#x2F;&#x2F;lists.gnu.org&#x2F;archive&#x2F;html&#x2F;qemu-devel&#x2F;2016-04&#x2F;thread...</a>