Pull requests and confidential blocks

There is an example in the documentation which uses `core.replace` to remove a confidential block.
This transformation works perfectly fine in one direction. But I don't understand how to make it work with pull requests.

Such transformation is not reversible. So if pull modifies a file with a cofidential block, then the block itself gets removed.

Is there some easy way to apply such pull requests with copybara?