Watermarking for Out-of-distribution Detection