Update the early_secret generation to use the new ticket_nonce field