No objections on tech-security: http://mail-index.NetBSD.org/tech-security/2012/09/03/msg000548.html The security of generating keys at boot remains questionable, but this change makes that no worse.