You can stop it refusing but you can't make it tell you things that aren't in the training data

They are saying there appears to be a lot more to these refusals than saying no, and this process appears to only touch the tip of the iceberg; as the refusal seems to run deeper into the token prediction process.