Comment 3 for bug 716175

I'm marking this low for a couple of reasons:
 - we're simply not likely to get to it within 2011
 - we're working on reducing downtime windows with a goal of eventually removing readonly mode, which will remove the need to directly fix this bug at all
 - moving the nonce out of the db has tricky implications on points of failure, retrying of requests.