While the device is locked, you can swipe down to access the quick controls and toggle Wi-Fi/Bluetooth etc. You cannot access the setting for these toggles by holding your finger down on them, they just take a few moments and then toggle on/off. If the user holds down their finger expecting (as it works when the device is unlocked) the settings to appear, the shell/lock-screen should prompt the user to unlock the device and then open directly to the settings. This may be a bit of a complex one to solve, I'm not sure.