Frontier AI models can be jailbroken relatively easily — Trace