scripted-diff: use insecure_rand256/randrange more