And cloak it in layers of language so that a quick read doesn’t catch it. It’s like human prompt poisoning.