2) we cannot guarantee that the resulting text is still a natural input.
as we expect, tokens strongly associated with aggression, such as " ", "dead" and many other curse words appear frequently as the most influential tokens.