I am going to try and use the "set IP default next-hop" approach since that will allow me to use/match an ACL with permit statements rather than the "Deny" with the "set IP next-hop" method. Just not sure if there is an implicit deny at the end of the statement or not because of the fact the nexus can't deal with deny/PBR...

should I have a permit ip any any at the end of the ACL?