The payload can be delivered unencrypted, as long as the public key used to check the authenticity of the payload was provided throught a safe channel.