If you're trying to prevent your prompt from leaking, why don't you just use string matching?