arc4random() returns an unsigned 32-bit int but sendmail expects the

arc4random() returns an unsigned 32-bit int but sendmail expects the
RNG to return a signed (but positive) value.  This resulted in some
random numbers being interpreted as signed negative.  In one case
the result was being used to traverse an array so bad things (tm)
were happening.  The fix is to simply mask out the sign bit.