Sounds like we need an adversarial convent for creating watermarks.