A Recipe for Watermarking Diffusion Models