You don’t need a nonce for every field, a single nonce should suffice

This is because a nonce isn’t tied to a field, it’s tied to a request, and verifies that you did indeed intend to press update, or click a link, submit a form, etc

As an example, back in the days of MySpace, they didn’t verify intention on the logout script, so you could put an image tag on your profile and set the src as the logout URL. Anybody who visited your profile would get logged out.

If MySpace had added a nonce, they’d have been able to verify if you’d arrived at the URL intentionally, or by accident/malice.

As a result, you should never need to verify multiple nonces at the same time, you only need 1.