Even if random chars are all 0, at least the first one isn't
so we know we can't return INVALID_UUID.