How To Fool an Eavesdropping AI … With Another AI