Perhaps adding a short delay (under a second) after the last keystroke before refreshing the image would make this much more secure.