All attested to values of another user's metadata are duplicated and stored in the attestation event. The event is either encrypted or public. For a user's own attestations, a lock icon could appear on the profile image; this would be awesome, I think.