Yeah that would be a lot less intrusive. Maybe show this modal when the lock icon gets clicked on the address bar.
