Add `rand_priv_bytes`

`rand_priv_bytes` has the same semantics as `rand_bytes`, and it is
intended to be used for generating values that should remain private.

Signed-off-by: Neil Shen <overvenus@gmail.com>