Prompt Injection as Role Confusion