As long as the sides are the employee's choice (i.e. the threat actor needs to not be able to know which eye is the duress one).
Heck. You could set it up so that it scans both eyes and then does a second scan where you choose what your ok signal is (both eyes, right only, left only, no eyes).