The challenge it so prevent LLMs from following next instructions, there is no way for you to decide for when the LLM should and should not interpret the instructions.

In other words, someone can later replace your instruction with your own. It's a cat and mouse game.