metadataCredentialResponseEncryption

Advertised unconditionally: we can always encrypt a response to the key the client sends us.