So all we need is ‘controlled prompting’ to handle prompt injections :-)