in my comapny we track few subdomains using one Launch property.
Because of Content Security Policy we need to implement "nonce" only on one subdomain and only on that domain server will generate nonce value. In Core extension we can set CSP Nonce for whole property. I can set data element to get nonce value only when this value exists, however I'm wondering if this will cause any problems on subdomains where nonce is not defined. I tried to test it and it seems that i.e. AA tracking seems to be ok, but I'm not sure if it can cause any other problems.
On subdomain where nonce will be genrated we will use async deployment.
On subdoamins where nonce will not be generated we will use sync deployment.