system prompt aren't special. the whole point of the prompt injection is that it overrides existing instructions.