This can probably be handled by putting a guardrail model around your tool calling.

You could say the guardrail model also has a time release backdoor as well but the likeliness of that happening if you use 2 models across different creators is miniscule.