add Nonce-verification rule