If prompt injection attacks are an issue when building workflows on top of LLM’s, is there any work being done to build API’s and frameworks to parametrize input similar to how SQL injection attacks are mitigated? Can this even be done with non-discrete systems?