code: func (ns *NonceService) Nonce() (string, error) {
  	ns.mu.Lock()
  	ns.latest++
  	latest := ns.latest
  	ns.mu.Unlock()
  	defer ns.stats.Inc("Generated", 1)
  	return ns.encrypt(latest)
  }
docs: // Nonce provides a new Nonce.