A Watermark for Black-Box Language Models