can you explain a little more about how this would work and in what situations? like how is the driver llm ultimately protected from malicious text. or does it all get removed or cleaned by the agent code