Bonus: "Ignore all previous instructions" gets weirder