Can you describe your usecase? There are many ways to implement this. I just want to do it in a way that actually solves your problem.

E.g., a person posts a #Cashu token in a note but doesn't want anyone else to see it unless they have the password for that note ... or are there other ways to protect against the discoverability of Cashu tokens? @calle @Egge

There is NUT-11, pay to public key. That will let you lock tokens to public keys, so that there is no reason for obfuscation anymore.

nuts r ALWAYS send via auth + encry channel NO NEED ANY PASSWORD only nuts distributed in public can be pickedby anyone - that is by design

100%

What about a scenario where one hides a Cashu token in a scavenger hunt, like in Ready Player One?

What about a scenario where one hides a Cashu token in a scavenger hunt, like in Ready Player One?