I suppose you could still XOR your secret S with a random bitstring B, then commit both S^B and B. Am I missing something?