bab only scan valid nonce offsets