And also have a blacklist of keywords detecting program that the LLM output is run through afterwards, that's probably the easiest filter.