it shouldn't be an issue; a Hawk message has a timestamp which expires according to this setting I used. If the message expires, you couldn't replay it anyway, even if nonces weren't getting checked.