Hey there, I recommend enabling /dev/random:/dev/urandom in open_basedir by default. It's used to harden security in some secure-relevant web-projects, e.g. nextcloud/owncloud...

Best regards