[simonw]

I think prompt leaks should be treated as inevitable at this point, and as such I think efforts to avoid them are a waste of time.

Since they're going to leak anyway, I suggest not putting anything potentially embarrassing in there - like instructions not to leak the prompt!