Agree, there does not have to be a smoking gun. Current and previous attempts are just ham-fisted.

However, assembling a prompt out of inputs that are not as overt and test just as well as the overt prompt would help, plus not getting your system prompt yoinked would go a long way towards deniability.