Thinking again, why lock rather than encrypt? 1) encrypt an ecash token to a pubkey, send in note 2) recipient decrypts, claims, and reveals the decryption in another note such that everyone can see the zap. Probably been discussed elsewhere, i havent been following any ecash-zap commentary.