I suppose this could also be used in reverse, to suppress the "harmful direction". But probably it wouldn't work as well because the space of harmful responses is more diverse than the space of refusal responses.

Anyway, this can be used to suppress any pattern of responses right?