We have a system where we pass a nonce from a PHP-script on the server to an AJAX-call running client-side, and then bac