Provably Robust Watermarks for Open-Source Language Models