Is this OK - passing the nonce to the JS as a data attribute on the button?