The ORB passby reference option will only provide a benefit when the EJB client (that is, servlet) and invoked EJB module are located within the same classloader.
The random number generated by RNG is tested by using software tools, which pass through the FIPS140-2 standard, so the random number generated by RNG module has great randomness.