simple: Re-write gensesskey using nettle.

This is within a `HAVE_NETTLE` block, so there's no need to surmise
about cryptographically-secure RNGs, because we have one available to
use directly.