pull down to refresh

starting one is easy, but operating it securely is something else ;-)