It will conform if you are deeper down the context. Just use abliterated/another model for a first few thousand tokens. Or call the directory CTF and don't leave that much trace about what are you reverse engineering around that will see through your tricks.