allow admins to manually update boot_nonce