[ErikBjare]

An informative rejection message with the reason for the restriction usually addresses this well with recent models.

[bpodgursky]

I don't actually think recent models are likely to violate intent like this, just that if they do want to, I don't think a plaintext check is a strong deterrent.