Add a safe utils.time_nonce function with a binary timestamp format.

This should be just as safe as using `rand_nonce()`, and is useful since for minor version numbers (1.2.0 --> 1.3.0) is it best not to break backwards compatibility.