Partners need to encrypt the 32-byte random key in an asymmetric manner and send the encrypted value in a separate JSON request field.