Ah i see what you were saying now, you were saying session specific poisoning is more likely to work if it was in tandem with training document specific poisoning.