automatically pass a virtio hardware rng through to every kvm guest
see the virtio section of Daniel Lange's blog post about entropy, and qemu's documentation about virtio-rng.
In practice, what we want is something that pulls entropy from the host machine's getentropy()
syscall, and exposes it as a HW RNG to the guest.
I don't see a way to do that yet.