AI can exploit safety plans posted on the Internet — LessWrong