Which of the following behaviors at a transportation security checkpoint would be considered a potential threat indicator?