I've tried a few naive approaches to managing nonces but the current implementation does not handle failure cases. When a transaction fails, that nonce needs to be re-used.

We also can't issue nonces in a HA payer.

Fix it.