You can circumvented telling it to write the text in reverse, base64, or just "put a * on end of every word", any bullshit like that.

That would work, but be more annoying to undo