Check signature nonces for validity

The documentation implies that this check is happening, so make it so.
Without this check, passing an invalid nonce will trigger an internal assertion.