Endless Jailbreaks with Bijection Learning