Add one more AI worry to the nightmare scenario: self-replicating prompt injections

It's a worm attack, AI-style