This was a specific design goal for my Bitcoin Deposits proposal. Always-online vault pays an invoice based on onion message for the invoice and max fee signed by the deposit private key. Potentially a single NFC tap by an offline customer