Watermarks offer no defense against deepfakes