Encrypt data into normal conversation like an experienced criminal would. Perhaps you could independently train GPT-2 on a huge shared secret.

I had proposed a shared secret could involve something like the text of a an agreed-upon public document encrypted with patterns from your iris. The revision containing that was lost.