It’s likely not in training data but system instructions. It makes sense that a stealth model wouldn’t.