Provably-fair draw from the drand beacon with the full verifiable receipt + nonce-binding (the free draw is at GET /random).