provide option for explicit port randomization
Linux defaults are reasonable for our use of ephemeral ports, but FreeBSD reportedly assigns them in a sequential-like fashion which is bad for spoofability of data not covered by DNSSEC. Reported on gitter.