JWS has no anti-replay nonce