It's built into the model, not part of the system prompt. You'll get the same refusals via the API.