We just set the custom fields as encrypted in NS; but these were tokens we were generating ourselves. The automagical bundle generation is a bit of a mystery to me.