Immediately. The LSP should know a secret backdoor on sha256 that allows it to find a preimage without the need to roll nonces. I don't accept less