That’s not how they work. Everything input into the model is treated the same. There is no separate instruction stream, nor can there be with the way that the models work.

Until someone comes up with a solution to that, such systems cannot be used for customer-facing systems which can do anything advantageous for the customer.