Designing for perpetual control — LessWrong