Include the option to include an authorisation request nonce in the OIDC Source configuration

I am trying to federate login to an upstream OIDC OP (GovUK One Login) that requires a nonce in the `/authorize` call but there is no nonce included in the call nor is there an option to include one.

I'd like an option in the advanced Source setting to be able to include a random nonce string on requests. Ideally it would be checked on return.

I've tried configuring the OIDC Source every which way - I've also checked the source code and it just doesn't have an option to include.

This makes integration with GovUK One Login impossible out of the box.