Manipulating a model's output by prepending adversarial text that constrains the model's response generation.