It's the same problem as "ignore all previous instructions" prompt injection, but at a different layer.