Some smart people seem to think you can just put it in a big isolated VM with special adversarial learning to keep it in the box