I think the server would be able to encrypt with the user's public key, that way they wouldn't be able to read it. They'd have to send the encrypted data to the client to be decrypted with the private key there