On the Difficulty of Constructing a Robust and Publicly-Detectable Watermark