nuts r ALWAYS send via auth + encry channel NO NEED ANY PASSWORD
only nuts distributed in public can be pickedby anyone - that is by design
E.g., a person posts a #Cashu token in a note but doesn't want anyone else to see it unless they have the password for that note
... or are there other ways to protect against the discoverability of Cashu tokens?
nostr:npub12rv5lskctqxxs2c8rf2zlzc7xx3qpvzs3w4etgemauy9thegr43sf485vg
nostr:npub1mhcr4j594hsrnen594d7700n2t03n8gdx83zhxzculk6sh9nhwlq7uc226
Discussion
What about a scenario where one hides a Cashu token in a scavenger hunt, like in Ready Player One?