fix: preserve trusted injection containment