Millis is fine, since you said that the nonce doesn't absolutely have to change every request. Plus request ids can repeat in practice too.