The Stable Signature: Rooting Watermarks in Latent Diffusion Models