Machine-learning models vulnerable to undetectable backdoors