Tell them no. They have no legal recourse to search you, and since you bought <whatever>, it's your property, despite the fact that you haven't left their store yet. I usually just don't respond to them at all, or, at best, tell them no.