document that nonce-based authentication is for the future