diff --git a/Cargo.lock b/Cargo.lock
index 6c1716b005..1b8eb44c3d 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -4021,6 +4021,7 @@ dependencies = [
  "pem 1.1.1",
  "petgraph",
  "pq-sys",
+ "rand 0.8.5",
  "rcgen",
  "ref-cast",
  "regex",
diff --git a/nexus/db-queries/Cargo.toml b/nexus/db-queries/Cargo.toml
index b1b8f3b28f..0ad33493e4 100644
--- a/nexus/db-queries/Cargo.toml
+++ b/nexus/db-queries/Cargo.toml
@@ -32,6 +32,7 @@ oso.workspace = true
 paste.workspace = true
 # See omicron-rpaths for more about the "pq-sys" dependency.
 pq-sys = "*"
+rand.workspace = true
 ref-cast.workspace = true
 samael.workspace = true
 serde.workspace = true