V12
The underlying problem is that consent and the request it applies to are never bound together. One approval sits in a background singleton. A lock destroys the keys but leaves the queue intact. An unlock resolves whatever is in that queue, with no check on which screen the resolve came from or whether a user confirmed anything. Entering a correct password is sufficient to produce a signature.