check for arc4random_buf at runtime, on OS X (Tweaked by nickm: Fix up the arcr4andom_buf OSX hack so that the fallback case isn't compiled into the code when we have arc4random_buf() and we are not on OSX. Also add a comment explaining what's up.)