Why Watermark Detection Requires the Model Maker's Cooperation (and Why That's a Problem)