If you're stuck with legacy that's the way it is. Note however that there are interactions between using a nonce and caching which require caution (since nonce

If you're stuck with legacy that's the way it is. Note however that there are interactions between using a nonce and caching which require caution (since nonce is supposed to be used only once but caching can work against that), so proper protection here has a cost in complexity and/or speed.