On Function-Coupled Watermarks for Deep Neural Networks