I thought of it as two seperate problems:

The first one is legal - if the person asked to surrender credentials surrenders them, and the device turns out to be reset (assuming no foul play), does this constitute the crime of not surrendering the credentials?

If the answer to one is “yes”, the technological question begs itself: How to make a duress pin indistinguishable from the real one?