For backups to validate res*/xres* hash, they need rand. We'll need to add it to delegated vector messages and to key share tables.