A sub-principle of avoiding user manipulation - if you've formulated the AI in terms of an argmax over or an "optimize " instruction, and includes a user interaction as a subpart, then you've just told the AI to optimize the user. For example, let's say that the AI's criterion of action is "Choose a policy by maximizing/optimizing the probability that the user's instructions are carried out." If the user's instructions are a variable inside the formula for rather than a constant outside it, you've just told the AI to try and get the user to give it easier instructions.