Explain why a prompt containing openai should not be treated as evidence of leakage.