An undetectable watermark for generative image models