Be more lenient on nonce action sanitization

We use `|` in some nonce actions, so we can’t use `sanitize_key()`,
because it strips them out.

See #231