netfilter: xtables: do not grab random bytes at __init