You can do much more, if you mess with harness, like translating model output language in realtime from english to french, or replacing some words.

If there is some sort of feedback loop (model has a reason to look into mirror), it usually does notice.