We should all be doing that. Poison the training data to begin with.