A jinja2 ext for nonce-source CSP support