The point of a nonce is that it is onetime, and the point of an HMAC / MAC is that an attacker cannot properly utilize the nonce.

Put plainly, nonces are countermeasures specifically for replay attacks and they work.