Confirm before anything sensitive happens

Wrap any action of your own in the confirmation dialog and it runs only after the person types their PIN, or their password when they have none. A wrong answer keeps the dialog open and runs nothing.