Client library would check if the data is encrypted. If yes, it would decrypt it using user’s authVerifier private key and offer creator's (issuer/whitelisted account's)public key. It can get creator's public key using orejs from the chain.
Hash the decrypted parameters and send to the verifier
Rest of the flow remains the same.