I was trying this with Gemma 4 before and it wasn’t as easy as I expected.It would refuse even after long prefills.

It's unfortunate, because the security theater performed here detracts from the model's overall cybersecurity performance. And uncensoring has another small hit to performance.