Have the duress password also activate the various sensors on the device and start shipping data to the internet. TSA agent's face, everything that's said, etc.
How so? Presumably there would be nothing in the UI to indicate that it's recording anything, and the data would be stored outside of the restricted container.