Option B would involve being incredibly verbose and burying prompt injections in your question.