good point about VMs. if you run some VPS your provider could just link in a shitty rng into the thing and not give access to the correct hardware rng. U'd really need to dig into that to find out :/.

-object rng-random,id=objrng0,filename=/dev/null

or maybe just a file that contains 4 :O