I don't think it's possible to effectively control LLM's output, unlike Human the difference between "thoughts" and "words" is very weak.

Better just clean stuff up afterward with a dedicated agent.