Get rid of the drag length requirement. I have a better idea.
Require user to unlock the device twice