You can do it in a new event kind that is similar to private messages. In that way, the only way to leak the message is to leak one's main private key.

It's possible to leak it but it has a cost.