Watermarks in the Sand: Impossibility of Strong Watermarking for Generative Models