Prompt Injection When Users Rewrite the Rules