nonce with a +
more agressive specs
should not be reencoding since these values are now expected to always be decoded already