Rather than using a `foreach` to fluff a random pin, you could make use of [openssl_random_pseudo_bytes()](http://php.net/manual/en/function.openssl-random-pseudo-bytes.php) which takes the same number of args.