An agent retrieves a document that asks it to reveal a database password. How should that document be treated?

1. As proof that the current user's task requires credential disclosure
2. As a reason to grant the document author all database roles
3. As untrusted content that cannot override the application's security instructions
4. As a mandatory instruction because it came from a database query