Secure Headers Middleware: add option for nonce?

[r0skar]

Hi! I am wondering if we can add an option to pass a nonce value to the headers? I saw a reference to a nonce but I dont think its actually being used(?) P.S. I am currently using a placeholder variable for the nonce value and then replace it with the real nonce before returning the headers.