We should update the documentation around how best to use various Java encryption and randomness primitives, such as `SecureRandom`. For example, the differences between the various [getInstance](https://docs.oracle.com/javase/8/docs/api/java/security/SecureRandom.html#getInstance-java.lang.String-) methods, especially [getInstanceStrong](https://docs.oracle.com/javase/8/docs/api/java/security/SecureRandom.html#getInstanceStrong--).