Showing K doesn't seem prudent. Better to just sign twice and compare the results: they should be identical. If you really wanted to show K, better to show H(K). Otherwise someone could just use the revealed K to immediately compromise the security if they could see the device's screen.

Indeed one does have to worry about nasties like cams taking shots of your offline computer's screen.
