I might have an answer. I have set up a Lightning address service that accepts payment for @openbalance.app. The payment gets forwarded as cashu tokens which then can be accessed by the corresponding safebox with the nsec. The safebox can be created AFTER the bootstap payment.