I think that they are random enough
These are two VERY DIFFERENT sentences when it comes to crypto security:
- "I THINK they are random enough"
- "They ARE random enough"
A process that gives "random enough" results is safe to share with everyone. Since the results are "random" it doesn't matter who knows how they were generated.
If you are not willing to share the exact process (better yet, the exact code) you are using to generate the secret exponents, then they almost certainly are NOT random enough.
If you are willing to share the exact process (better yet, the exact code) you are using to generate the secret exponents, then you'll at least have the opportunity to have some knowledgeable people inform you how much of a risk you are taking.