You would still use a secret key, so it's impossible for the end user to decrypt it.