Use teppeis/csp#support-nonce