Process-wide in-memory guard. Suitable for a single verifier app instance.
Records nonce and returns true if it had not been seen before.
true