Ensured Random::Range does not overflow