Including nonce in sign/verify