Thanks Evan. This was an interesting exercise. If you could think of some way to idiot-proof the duress pin change workflow for complete doorknobs like myself, that would be good. (Not that I think I'll be making the same mistake again).

Something on this screen might say "Enter your regular unlock PIN. Do not enter your existing duress PIN, or Zeus will smite thee and thou wilt have a stressful Christmas."