more hardening

files/snuffleupagus/base.rules

+# Harden the PRNG
+sp.harden_random.enable();
+
+# Disabled XXE
+sp.disable_xxe.enable();
+
 # based on https://snuffleupagus.readthedocs.io/config.html#miscellaneous-examples
 # Harden the `chmod` function
 # sp.disable_function.function("chmod").param("mode").value_r("^[0-9]{2}[67]$").drop();