Comment by inigyou

Probably not to get the key, but you could certainly use it adversarially to remove the watermark.

Removal may come down to changing every third token to a different one.