Prompt injection attacks are real. Here's how I protect against them.