Reverse-Engineered Google AI Watermark System Allows Tampering.