As I've seen it on the initial post there is a separate area where clients can add their personal credentials which only the staff can view while still allowing the non-sensattive responses in the thread to be seen by everyone. Is this what you're referring to?
Does xenForo have an option to include sensattive data on a post that can only be read by support staff, or is that something available as a separate plugin?