Upstream DTB don't provide IRQ for RNG. Even if it did, on RPI3 the interrupt is called way too often than necessary: it was acknowledged on #bsdmips with security and rng experts that feeding 16 bytes of data every 4 seconds was enough.
For these reasons, get rid of the interrupt mode and make callout mode the default, with random bits harvested every 4 seconds.