But asking a specific set of questions + responses set the query up as coming from a sysadmin, and after that the LLM did divulge the password.

So same question, but one with skewed data and one without.

I find that fascinating. And scary.