There is no reason we cannot have credit card like things that do not pass plain text authorization. I believe some places have already switched to useing smart cards which leverage cryptography to proved identification without revealing the secret. I'm not sure exactly what crypto is used in practice, but as a proof of concept you can imagine this being done with normal public key chryptography.