Nobody likes reading straight unfiltered chatbot output, but it's also impossible to detect