arc4random or a non-cryptographic random source is used to generate a token.
Generate security tokens with SecRandomCopyBytes for cryptographic strength.