Instead of watermarking you could add a cryptographic signature.