diff --git a/priv/random.sh b/priv/random.sh
new file mode 100644
index 00000000..1834f3e1
--- /dev/null
+++ b/priv/random.sh
@@ -0,0 +1,4 @@
+#!/usr/bin/env sh
+set -ou pipefail
+
+cat /dev/urandom | base64 | head -c 64