Traceable Black-box Watermarks for Federated Learning