Perfect density models cannot guarantee anomaly detection