It's kinda neat to realize that the difference between a partially-blind and fully-blind signature scheme is (in this context) just a performance concern. We certainly want to figure out a (elliptical or bilinear or lattice) partially-blind solution, but that won't be included in version-0 of the 402-Receipts standard, and that's fine.