I did this with Codex's recent encryption of compaction.

Interestingly, I didn't have to drop to a dumber model, just a 2 sentence <developer> prompt auto-injected before and after compaction made all their models output the encrypted compaction data in plaintext.

The result was... interesting. There's nothing unique in there and I still don't understand why they decided to encrypt it in the first place.