Thinking about it, maybe it's worth leaving this one as-is for the general case, and then having activity add its own hash since it is the one introducing the signature nonce requirements. Activity could, for example, list and sort the activity ids for the hash identity of the message.