Then put that junk in a secure enclave (that unlocking doesn't touch), or in a separate chip. Don't screw over your users who want to have some control over the device.