text: Our attacks also modify queries, but with a different aim than the above types of attacks: undermining the integrity of the 
  control plane routing, rather than the LLM itself. Future work might investigate indirect control plane integrity attacks 
  that, analogously to indirect prompt injection, serve to somehow trick users of a routing system into forming control- 
  plane-confounding queries. 