I don't have a fingerprint reader or any sort of biometric security, but I have a very good feeling that the icon is in shell32.dll, which would require a bit of semi-advanced tinkering. As for the setting to change the icon, I would guess it's buried somewhere in the registry.