Retrying a transfer must not reuse the same set of nonces as this can lead to `cannot reuse nonce for GCM encryption`.