They literally state here that they can't do that, since the risk is jailbreaking which seems to be an intrinsic part of LLMs.