I'm surprised that this functionality was implemented so poorly in Graphene. There should be no visible behavior that gives away the use of the duress password.