Thanks - I have updated the howto based on your answers and what I have figured out from experimenting and code reading. At this point the only important mystery is the lack of rndseed and I'll try that some time.
Attachment:
signature.asc
Description: PGP signature