I still think the best idea is to use a seed and a PRNG. The full output the PRNG will produce over infinite time can be entirely determined by anyone who has the secret seed, but without the secret seed the output appears to be randomness. Of course the seed is wiped if any of the sensors are triggered.