The point of a nonce is that it is onetime, and the point of an HMAC / MAC is that an attacker cannot properly utilize the nonce. Put plainly, nonces are count

The point of a nonce is that it is onetime, and the point of an HMAC / MAC is that an attacker cannot properly utilize the nonce. Put plainly, nonces are countermeasures specifically for replay attacks and they work.