Replace `math/rand` `Read()` callsites with `crypto/rand`

In Go 1.20, the `math/rand` package `Read()` function is deprecated. To
avoid linter errors update callsites to use `Read()` from the
`crypto/rand` package.