This is the kind of stuff I had in mind when making the suggestion about sabotage:

https://arxiv.org/abs/2204.06974