Perhaps rename this to `random_nonce`? I was actively avoiding providing a nonce policy as in some applications you'd really like to use a counter or a monotonic clock or also treat the nonce as a sequence number. Also, some protocols like DNSCurve specify [nonce extension techniques](https://tools.ietf.org/html/draft-dempsky-dnscurve-01#section-5).