Preventing watermark forging attacks in a MLaaS environment