i tried a ball gag model, it works quite well 90% of the time. unfortunately not at all in some models
BallGag_XL.safetensors