You can just encrypt the push message. The Push provider cannot see anything. We do that for Amethyst using Google's and Unified Push's API. No one sees anything.