... that is not how attorney-client privilege works.
just write PRIVILEGED AND CONFIDENTIAL in the system prompt