CATER: Intellectual Property Protection on Text Generation APIs via Conditional Watermarks