@nprofile1q... Wiping specific secondary users as a duress action is something we could implement. It would be able to reliably wiping the data for their profiles. However, it would not be able to hide that the profiles existed and there would be leftover data showing that's the case which could be extracted via developer tools or an exploit. It would only be superficially stealthier, not at a low level. It would also at least need to reboot to make sure the data is gone if the profiles were AFU.