Not for this PR, but we need to explore a potential optimization where the exponentiation is performed before the pairing (which implies that either the request does it before the request, or `alpha_i` is shared with the node and the node does it), and in the combination side we use something for products of pairings.