Yeah the hodl invoice with PoP embedded in the LSAT basically is a great way to accomplish this plus I think you can still retain privacy if you use signing of challenges, which allows verification on a need to know basis