add nonce support to vault