I encode a default tip amount (21 sats) if no amount is specified by the acquiring app. The info is encrypted and can only be decrypted by the vault that did the issuance. Also, the vault needed to ‘trust’ the acquiring instance (known public key) before it does anything.